Security Basics mailing list archives

Re: Procedural Issues


From: "Kurt Buff" <kurt.buff () gmail com>
Date: Wed, 13 Jun 2007 14:34:38 -0700

In a full-on, large-scale production environment, code moves something
like this:

Dev
Test
Staging
Production

Each stage has its own set of admins/support staff, who are
responsible for placing the approved software from the previous stage
into their environment, according to their individual requirements.

Kurt

On 1/8/07, WALI <hkhasgiwale () gmail com> wrote:
In a software development environment, what risks do we have if we allowed
software development team leader, access to Live production servers?

Security demands that the two environments be segregated.

If I segregate the two environments, who would shift the code from
development to Live?


---------------------------------------------------------------------------
This list is sponsored by: ByteCrusher

Detect Malicious Web Content and Exploits in Real-Time.
Anti-Virus engines can't detect unknown or new threats.
LinkScanner can. Web surfing just became a whole lot safer.

http://www.explabs.com/staging/promotions/xern_lspro.asp?loc=sfmaildetect
---------------------------------------------------------------------------




Current thread: