The Management Assistant built something with customer data and no permissions

“It's more of a prototype.”— Petra, The Management Assistant

Reason:

Honestly? Because someone said "GDPR" and the meeting went quiet. Quietly rolled out to three countries.

Built by:

Petra, a controller

Build time:

2 evenings

Built with:

a Slack bot doing database writes

Database:

MongoDB where every document has a different schema

Authentication:

the admin route is called /secret

Deployment:

deployed from Priya's laptop

Responsible:

an intern's old manager's manager

Documentation:

a Loom video whose owner account has been deleted

Security situation:

security is handled by keeping the URL secret

Future disaster:

It will still be running in 2036.

Age: 153 days · originally expected to last 3 weeks · 2 owners so far · survived 1 reorganisation · last meaningful change 153 days ago · original builder left 43 days ago

Rated common mostly because: 320 users, the builder has left, 16% chance of becoming business critical.