457
Please don't delete the production DB (lemmy.zip)
submitted 7 months ago by to c/programmer_humor@programming.dev
25 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[–] 0 points 7 months ago (7 children)

Dangerously-skip-permission is carte blanche for the model to do whatever it pleases with your system. If you happen to have access to a production database on your system, then the model also has access to it, should you use that option.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] 8 points 7 months ago (1 child)

    that assumes

    1. the user does have access to a production db;
    2. the agent has access to a terminal from which they can reach the production machine (not in a container, different network, or similar);
    3. access does not require interaction (like entering password);
    4. the agent deliberately decides to access a production database to solve a development problem, and that was not the user requesting it;
    5. the agent manages to find the database credentials in production;
    6. the agent is left unattended.

    Possible? Sure. It's also possible that I drink half a bottle of vodka on a Friday night and mess up with production.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 7 points 7 months ago* (4 children)

    Yes, but the question is why the hell do you have access to a production database in the first place?!

    And if so, how is it on the same machine you can run Claude code on?!

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •