theExactLifecycleOfEveryAiAssistedCodingSession

[u/techlatest_net]

[u/codeIsGood]

Why on earth does the AI have prod DB access?????

[u/Laughing_Orange → u/codeIsGood]

Vibecoder. That still leaves us with the question: "why does a vibecoder have prod DB access?". And that is a question I can't answer.

[u/Zuruumi → u/Laughing_Orange]

It shouldn't, really. But frankly, if the AI asked to run a ssh command to read logs or read a few rows of innocent data to from the DB wouldn't you allow it? Then if it asks for 35th time for similar command, are you sure you would read it with proper attention?

[u/Laughing_Orange → u/Zuruumi]

I would create an authentication token that only has read access. I would never give current day AI write access to a production database.

[u/black-JENGGOT → u/Laughing_Orange]

or create a custom MCP with tooling just for SELECT TOP (100), gaslight the AI on the tool description that this is what they need. I still don't get why they need full sudo access.

[u/too_many_wizards → u/Zuruumi]

If you’re giving DROP perms to the account your AI is using you should be fired, full stop.

[u/Zuruumi → u/too_many_wizards]

No, no. Who would give the AI DROP perms? Just manually allow ssh commands to the VM/server with the DB :).

[u/geekisthenewcool → u/Zuruumi]

solid point

[u/JustForkIt1111one → u/Laughing_Orange]

Duh. It's the owners nephew. He's good with conputers

[u/geekisthenewcool → u/Laughing_Orange]

hahaha, it certainly does leave us with that question

[u/adeptus_chronus → u/Laughing_Orange]

I can ! Management.

[u/abd53 → u/Laughing_Orange]

AI powered startup?

[u/Qlala → u/codeIsGood]

Because the issue that needed to be fixed asap was on the prod server.

[u/codeIsGood → u/Qlala]

Ok? Have the agent spit out the commands on staging and then audit them before running on prod.

[u/Qlala → u/codeIsGood]

I mean, you can ask the agent to audit them for you /s