Re: Thoughts on "Love Your Database" - Mailing list pgsql-general

On Wed, May 4, 2016 at 8:13 AM, Geoff Winkless <pgsqladmin@geoff.dj> wrote:

​<snip>

The sensible way is to do it as John wrote - to restrict access rights
to everyone except admin to calling functions only. That way the
functions are written by the people who are paid to understand the
business rules and the data behind it, and the application developers
can ask those experts to do the heavy lifting for them. Having to
persuade management that they should no longer be able to connect the
database to MS Access and make changes that way will usually put an
end to that pure model, though. :)

​Allowing PHBs direct access t​o company data is a nasty thing. They become like some users who "know Excel". They are now just as knowledgeable as someone who's been doing this for years. I've actually heard one say something akin to: "Damn it, I can write Excel formulas. I know very well that an new function on the web site could be written in less than a day, if you'd just get off you a$$ and do it."

 

Geoff

--

The unfacts, did we have them, are too imprecisely few to warrant our certitude.

Maranatha! <><
John McKown