• Xerxos@lemmy.ml
    link
    fedilink
    arrow-up
    45
    ·
    19 hours ago

    Human developers should not develop with the production DB, why the hell would you give an AI the rights to touch the prod DB?

    • VibeSurgeon@piefed.social
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      2
      ·
      17 hours ago

      Dangerously-skip-permission is carte blanche for the model to do whatever it pleases with your system. If you happen to have access to a production database on your system, then the model also has access to it, should you use that option.

      • Eager Eagle@lemmy.world
        link
        fedilink
        English
        arrow-up
        5
        ·
        11 hours ago

        that assumes

        1. the user does have access to a production db;
        2. the agent has access to a terminal from which they can reach the production machine (not in a container, different network, or similar);
        3. access does not require interaction (like entering password);
        4. the agent deliberately decides to access a production database to solve a development problem, and that was not the user requesting it;
        5. the agent manages to find the database credentials in production;
        6. the agent is left unattended.

        Possible? Sure. It’s also possible that I drink half a bottle of vodka on a Friday night and mess up with production.

      • minfapper@piefed.social
        link
        fedilink
        English
        arrow-up
        6
        arrow-down
        2
        ·
        edit-2
        13 hours ago

        Yes, but the question is why the hell do you have access to a production database in the first place?!

        And if so, how is it on the same machine you can run Claude code on?!

        • boonhet@sopuli.xyz
          link
          fedilink
          arrow-up
          5
          ·
          11 hours ago

          I’ve worked at places where senior devs have access to prod for emergency fixes but usually the procedure is to use a VPN AND an ssh key with a passphrase. Usually.

        • VibeSurgeon@piefed.social
          link
          fedilink
          English
          arrow-up
          2
          ·
          11 hours ago

          I’ve worked at several places where I’ve been able to access production databases.

          No need to be so dramatic about it, really.

        • Ethan@programming.dev
          link
          fedilink
          English
          arrow-up
          3
          ·
          12 hours ago

          Startups and small companies where there simply aren’t enough resources to set up proper operational controls

          • Bakkoda@lemmy.world
            link
            fedilink
            arrow-up
            4
            ·
            11 hours ago

            No no no I’m not running Dev ops on the production system. I’m running prod ops on the developer system.