> log the configuration That's a change, inherently much more risky than the "cat /.../env" the colleague wanted to do. Also the change might well cause the p

> log the configuration That's a change, inherently much more risky than the "cat /.../env" the colleague wanted to do. Also the change might well cause the problem to go away, and now you know nothing instead. The principle is good, but it sounds like it has taken on a life on its own. The ops guy could also have executed the cat command on the spot with the right privileges. Sure, it's gatekeeping, but so is the four eyes principle, and a little of that gatekeeping can be necessary to keep those nines rolling.