|
I am of the opinion that a developer's User ID should never be authorized to access production applications or data… If a developer requires access to a production application, create another User ID for them, just like any other production user.
Allowing a developer to have command line access to production applications and data just makes your job as a Security Administrator that much harder. Now you do have to worry about what a developer can do that they shouldn't be doing.
If you give developers command line access to production applications, you are providing a way for an untrustworthy developer to play around with your production security configuration and if they are lucky or devious enough they just may figure out a way to hack it. Play it safe… exclude developer User ID's from production access.
|
