18
bahua
6y

I used to work on a production management team, whose job was, among other things, safeguarding access to production. Dev teams would send us requests all the time to, "run a quick SQL script."

Invariably, the SQL would include, "SELECT * FROM db_config."

We would push the tickets back, and the devs would call us, enraged. I learned pretty quickly that they didn't have any real interest in dev, test, or staging environments, and just wanted to do everything in prod, and see if it works.

But they would give up their protests pretty fast when I offered to let them speak to a manager when they were upset I wouldn't run their SQL.

Comments
  • 0
    Aren’t the DBs in your dev/test environment populated with usable data?

    I can’t think of a valid reason other than that for a developer to want to run a query in production
  • 1
    @avasconcelos114

    It occurs to me I wasn't clear in my post. The specific query I listed is intended to harvest all the user credentials from an Oracle DB.

    So requests like these were attempts to circumvent the existence of the production management structure, and just get unticketed access to play in production.
Add Comment