Securing the Liquibase Changelog and Resources Directories

These directories contain the changes to be deployed. They are analogous to the SQL Scripts that DBAs have been responsible for deploying prior to using Liquibase Business. Liquibase Business requires that these directories are checked-in to source control and managed the same way application code is managed today.

The same source code repository access controls that are in place for the application code need to be in place for the database code with the caveat that the Liquibase Project needs to reside in its own, separate repository.

In the case where both the Packaging and Deployment processes are automated, access can be limited to the small set of individuals responsible for the initial setup and occasional management of a Liquibase Project as well as the deployment automation systems.

There is no need to give Liquibase Project access to either the Developer or DBA teams for day-to-day operations.