11
votes
Accepted
What are possible implementations (or examples) of the four-eyes principle?
One of the implementation on code is the Pull Request model (PR) popularized by GitHub.
The main reasoning behind is that only a small set of maintainers of the product will be allowed to merge code ...
- 11.3k
9
votes
What are possible implementations (or examples) of the four-eyes principle?
Code Reviews
This is about having at least 1 other person look at the code written by somebody, eg to evaluate if it meets some predefined criteria like:
Coding standards (indentations, etc).
Inline ...
- 7,185
8
votes
Accepted
How to implement the four-eyes principle for emergency fixes?
In the SCM-world where I'm mostly familiar with, the above scenario is typically addressed by what's called the "abbreviated-approval list procedure.
Here is a blueprint of it:
Define your business ...
- 7,185
6
votes
What are possible implementations (or examples) of the four-eyes principle?
These are strategies/patterns I can think of:
Separation of Duty
DevOps, to my view at least, does not means embodying of both dev and ops in a single person. So it is still possible to separate the ...
- 341
4
votes
Can GitHub's Pull Request model be used for implementing post approvals?
Yes, I do believe so. To explain that I need to lay some groundwork on how I have implemented something similar, I have simplified the model in an attempt to make it as clear as possible.
...
- 11.6k
3
votes
How to implement the four-eyes principle for emergency fixes?
In the case of off-hours emergency fixes, it's more practical to require less sign-off for changes than your normal procedure. Generally, you can deploy a fix and then do post-approvals the next ...
- 650
Only top scored, non community-wiki answers of a minimum length are eligible