开发人员应该获得什么? [英] what should developers have access to?

问题描述

我在一个我们用来处理和存储敏感数据的应用程序的地方工作. 我们有3个环境.开发人员，UAT/QA(用户接受测试)和生产

我工作中的开发人员无法访问UAT或Production，并且只能访问Dev.在dev中我们所能做的就是连接到dev DB服务器.我们无权访问开发服务器本身.因此我们不允许在开发人员上使用Web服务器(iis)之类的东西.如果我们想要更改，我们必须经过一个正式的过程，向我们的网络管理员提交工作请求(这可能需要几天的时间才能完成). 如果开发人员要请求在UAT或PRod数据库中进行检查，也是如此. 在尝试支持我们的应用程序时，这种严格的访问限制确实令人沮丧.

我可以理解我们为什么要制定这些政策，因为它可以减少发生问题的风险.但这确实使解决问题既费时又痛苦.可能需要5分钟才能解决的问题(如果开发者可以访问)可能需要几天的时间才能解决.

这种严格的访问权限正常吗?

解决方案

很难说这是否正常.例如，我曾在投行工作过，那里的程序比您描述的还要严苛.我还为一个完全没有任何程序的IB工作.但是，值得注意的是，前者仍在营业，而后者只是最近才破产！

i work at a place where we build applications that process and store sensitive data. we have 3 environments. Dev, UAT / QA (user acceptant testing) and Production

the developers at my work have no access to UAT or Production and have limited access to Dev. All we can do in dev is connect to a dev DB server . we have no access to the dev server itself. so we arent allowed to play with things like the web server (iis) on dev. if we want changes we must go though a formal process of submitting work requests to our network administrators (which could takes days to complete). the same goes if a developer were to request for something to be checked in a UAT or PRod database. this strict access restriction is really frustrating when trying to support our applications.

i can understand why we have these policies, as it reduces the risk of things getting screwed up. but this makes solving issues really time consuming and painful. something that could take 5 mins to fix (if a developer had access) could take days to resolve.

is this sort of strict access rights normal?

解决方案

Difficult to say if it's normal. For example, I've worked for investment banks where they have even more draconian procedures than the ones you describe. I've also worked for one IB that had no procedures at all. However, it's noticeable that the former are still in business, whereas the latter went bust famously just recently!

这篇关于开发人员应该获得什么?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！