At several bigcorps where I've worked (>1000 in IT, billions of dollars, lots of regulation) this has been a very big deal and cause of never-ending friction.

At several bigcorps where I've worked (>1000 in IT, billions of dollars, lots of regulation) this has been a very big deal and cause of never-ending friction. 1) If the admins don't do at least minimal code reviews then it's meaningless. Developers will find ways to circumvent the inefficiencies in the system. 2) Admins don't do even minimal code reviews. 3) If developers don't have read access to production (code and logs) then admins become the weak link. (Obviously ssl keys and such not included.) 4) If a system is so locked-down as to completely eliminate the possibility of anything going wrong it will also be so locked-down that nothing can be fixed or improved.