5 ms·
That's horrific. I work for a fairly large payment processor and it takes multiple levels of approval and oversight from several levels of management to get tim
by devmor 4y ago
That's horrific. I work for a fairly large payment processor and it takes multiple levels of approval and oversight from several levels of management to get time limited access to a production database or client interface - all access being logged and ticketed along the way. The idea that someone could just start looking up transactions for shits and giggles would be unheard of.
- kjreact 4y ago> The idea that someone could just start looking up transactions for shits and giggles would be unheard of. What about the DBA maintaining the database? Do they not have query access to the data? How about the devs who are responsible for reporting; do they develop reports using generated test data? It’s naive to believe that data is entirely secure and private. There’s always a level of trust required from employees to not share private data that they may see on the job.
- Shish2k 4y ago> do they develop reports using generated test data? … yes? Develop against a test DB, then when you think you’re ready, run against prod with auditing and oversight