3 ms·
Many companies have userdata access heavily restricted and audit every access. It's not that hard to log all queries to production that don't come from the syst
by dx034 9y ago
Many companies have userdata access heavily restricted and audit every access. It's not that hard to log all queries to production that don't come from the system. And if a developer runs queries against the production database that should pop up somewhere immediately.
Not different in banks, any lookup of customer accounts is monitored and checked. Looking up a friend's account will get you fired immediately (or worse).
- buildbuildbuild 9y agoWhat I worry about is whether the logging is at the application level or database level. Would not be surprised if my banker’s crusty windows XP teller software’s auditing could be bypassed by an unexpectedly-savvy insider.
- dx034 9y agoLogging is done at every level. OS, network and multiple times on a db level (access log plus execution log).