2 ms·
In most secure places I've worked, devs have no access to prod at all. In the dev environment they have lots of permissions. Anyone putting a back door in to
by MattPalmer1086 5y ago
In most secure places I've worked, devs have no access to prod at all. In the dev environment they have lots of permissions. Anyone putting a back door in to the code so they could access it in prod would be looking at a criminal investigation.
- mrweasel 5y agoDisallowing developers access to production is pretty common in many Danish government contracts. Contracts for new IT systems are normally submitted by at least two companies in tandem. One company will be developing the software, while the other is responsible for operations.
- concordDance 5y agoAnd this drastically slows down diagnosis and fixing of production issues in my experience. Particularly performance issues. Probably by a factor of five or more.
- MattPalmer1086 5y agoI agree, it makes diagnosis much harder. It's certainly not a free lunch to lock things down. Sometimes that is what's required. I've just spent a fair bit of time working on allowing very limited access to prod by devs to investigate core dumps. Took a lot of argument to get that, but the alternative was moving the core dumps out of prod, and that wouldn't fly due to the sensitivity of data that might be exposed. It's certainly not easy working in a highly secure environment.