Approving SQL queries from Slack and Teams, safely
How to approve production SQL from Slack or Teams without weakening the control, covering signatures, replay protection, tokens and identity mapping.
access-control
4 posts
How to stop UPDATE and DELETE without WHERE in production
How to block UPDATE and DELETE statements without a WHERE clause in production, from MySQL safe updates to parsing, approval and database privileges.
Production database access without sharing passwords
Why a shared database password has no owner, what it costs you, and how to give developers production data access without handing out credentials.
What a production query audit trail should record
What a production query audit trail should record, why database logs alone fall short, and what to check before you hand the trail to an auditor.