Steve,
If you have a good set of test data the user can frequently replicate the problem in a test environment. You must regularly update your test data. As a last resort, there is an emergency password for a programmer to have access, in read-only mode to the production data. Sounds tedious, and it is. But after a period of adaptation the need to access production data goes sharply down as the users and programmers begin to (forcably) understand the need for thorough testing. In this scenario rarely does a faulty implementation make its way into production. I must emphasize that this is not for every user site, total development times probably are at least double, but the end result is more than twice as solid. But you probably can't sell this to a small or medium size company.
Regards,
Marc

----- Original Message ----- From: "Steven M Wagner" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Friday, December 09, 2005 10:27 AM
Subject: Re: [U2] SOX question (United States only, I believe)


Marc

How do the programmers to customer support if they cannot look at the data in the production data-base? It would be hard to research problems if you cannot look at live data.

Steve

At 08:49 AM 12/9/05 -0300, you wrote:
Good Morning Charlie,
No only a US issue, but also an issue for multinationals with US home offices. We are in Argentina and have clients that must comply and frankly we DO separate the DBA role from the programmer role and I am in favor of this although it is an administrative pain at times. Programmers on these sites do not get access to the production data-base and only get read-only to the user testing environment.
Regards,
Marc Hilbert
Pick Professional Center
Buenos Aires,
Argentina.

----- Original Message ----- From: "Charlie Rubeor" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Thursday, December 08, 2005 6:28 PM
Subject: [U2] SOX question (United States only, I believe)


When we started implementing Sarbanes-Oxley, I knew the question of why we don't separate the Database Admin role from the Programmer role would come up. Has anyone on this list been able to provide a satisfactory answer to the auditors, without spending a lot of time explaining the benefits of an
MV database?

Charlie Rubeor
Unix/Database Administrator
Wiremold/Legrand
60 Woodlawn Street
West Hartford, CT 06110
Tel: 860.233.6251 x3498
Fax: 860.523.3690
Email: [EMAIL PROTECTED]
Internet: www.wiremold.com

[demime 1.01d removed an attachment of type image/jpeg]
-------
u2-users mailing list
[email protected]
To unsubscribe please visit http://listserver.u2ug.org/
-------
u2-users mailing list
[email protected]
To unsubscribe please visit http://listserver.u2ug.org/

------
Steven M Wagner
[EMAIL PROTECTED]
Cary, North Carolina, United States of America
-------
u2-users mailing list
[email protected]
To unsubscribe please visit http://listserver.u2ug.org/
-------
u2-users mailing list
[email protected]
To unsubscribe please visit http://listserver.u2ug.org/

Reply via email to