Are there any risks to changing ACL rules on a production database server from a stability perspective?
694 karma · joined May 8, 2011
Are there any risks to changing ACL rules on a production database server from a stability perspective?
Better security guarantees, for sure, but if an unauthorized user gains direct access to your database, you might have bigger problems from a security perspective.
I speak from personal experience. If you know a good usecase for ACL in database for OLTP workflows, I'm all ears.
This feature might be great for OLAP systems, but it's awful for OLTP systems. The last thing I want is debug permission errors bubbling from my database into the application layer. It may not be as efficient, but you should always manage your ACL rules in the application layer if you're building an OLTP app.
In my experience, a bad process is one that 1) produces responsibility without accountability, and 2) does not account for process bottlenecks.
My previous role was in a team run like the first company. There were sky high barriers to get code into production, mostly centered around code reviews. It could take weeks to get the attention of enough people to review your code. Complex features had to be broken into multiple code reviews, and only people at your level or higher could review your code. So you ended up with a lot of code reviews and not enough reviewers.
The result? Politics. And where there is politics, there is corruption.
One time, one of my former team mates casually asked me to send him some Bitcoin if I wanted him to move faster. I refused, and the code review was delayed. Another team member stonewalled my code reviews as a retribution on an unrelated technical dispute.
It took me weeks to move through all my code reviews into production. I left the team immediately thereafter.
Be careful what you wish for.
This paragraph is almost poetic. As a human, I can relate.
----
Jeff accepted it like, "Oh well." You could tell he couldn't care less.
But Andy Jassy looked ashen. I think his becoming CEO was the reason Amazon changed course. If Jeff had stayed, he would have let HR decide the policy for the entire company, and it would have been disastrous for AWS.
I use a Mac Air. I don't have these keys.
> Do you mean loading more posts when you reached the end of the list? This will also be added in one of the next few updates.
No, I mean the usecase when let's say I'm viewing a post or even when I'm on the home page, and I want to check if there have been new comments or new posts without reloading the page.
* Some way to go to the top of the page without refreshing the page.
* Some way to load new posts asynchronously without refreshing the page.
We saw a huge improvement in our build times after we started using AWS CDK directly.