I worked at a public company where write access to the production databases was required to go through an intranet site which logged the query, required a code

I worked at a public company where write access to the production databases was required to go through an intranet site which logged the query, required a code review id, and limited the number of rows that could be deleted. It was more or less for sox compliance reasons, but it provided a nice bit of safety net around dangerous queries too. It slowed things down, but the forced code reviewer process saved me once in a big way.