We have change management tools for promoting database changes and server programs (AS400 - Aldon), which requires the change to be staged, blessed by our security director based on lovely documentation and data owner approval and then put into production by a "change admin" so the programmer can never touch production (in theory). We've been dotnetting for a couple of years and now our external auditors want us to have the same "no programmer" access for our application servers, despite our lovely documentation and data owner approval along with security director blessing. We're a small shop with 1 and a half .net programmers.
What tools or methods do folks use to promote their code to production that conforms to SOX "well controlled" processes which prevent programmers from directly touching production? -- Subscription settings: http://groups.google.com/group/dotnetdevelopment/subscribe?hl=en
