Member Avatar for Stefce

I want to split database access and permissions with another person. The problem is we don't know how we can make sure we both have the same rights and permissions to operate the database. So if anything goes wrong for example, one wants to change the password of the database or the email the other should confirm that too and should be informed.

Or any possible option for us to have the same rights 50-50...

The website will be for making money we invest in that website 50-50 so thats why we want to make this also...

  • 2 Contributors
  • 4 Replies
  • 98 Views
  • 17 Hours Discussion Span
  • Latest Post Latest Post by rproffitt

Dani AI

Generated

Short answer: what you want is a true "two-person control" (a 2-of-2 approval or veto) rather than simply two accounts with the same rights. As described, the goal is that any sensitive change (password, email, hosting action) requires confirmation from both owners; correctly noted most consumer tools do not enforce that out of the box. There are three practical paths: organizational, lightweight technical, and robust technical.

Organizational (fast, low cost)

  • Create a signed agreement that both must approve credential changes and keep an encrypted escrow copy (for example, a sealed USB or a lawyer) that requires both signatures to be opened.
  • Use separate admin accounts and enable strong 2FA for both. Log all changes and require a simple ticket/approval email chain before any password change.

Lightweight technical (cheap, buildable)

  • Keep credentials in a shared vault but implement a manual approval workflow: when one owner requests a change, log a pending change record and require the other owner to click an approval link protected by 2FA before executing the rotation.
  • Implement a tiny "change-manager" script or web UI that stores secrets encrypted and calls the hosting/database API to rotate credentials only after both approvals.

Robust technical (cryptographic / enterprise)

  • Use threshold cryptography (Shamir secret sharing) to split the secret into two shares that must be combined to reconstruct the password. That prevents either party from getting the secret alone.
  • Use a proper secrets manager / PAM with approvals and session recording for privileged actions if budget allows. These systems can enforce dual-approval workflows and audit everything.

Practical checklist before changing anything

  1. Define whether you want veto (both must agree) or equal independent access.
  2. Test the recovery path so you cannot lock yourselves out.
  3. Enable 2FA and audit logging.
  4. Keep an encrypted, offline backup of critical secrets under agreed escrow rules.

Caution: dual-control adds complexity—design and test the process before relying on it.

Recommended Answers

All 4 Replies

Member Avatar for rproffitt

What database server (such as SQL) does this?

Member Avatar for Stefce

The hosting provider is namecheap and the database is SQL and cPanel

Edited by Stefce
Member Avatar for Stefce

Also i got another way through this. Is there a program or app to store password BUT in order to access it, two devices need to confirm the session to show the password.

Edited by Stefce
Member Avatar for rproffitt

I asked What database server (such as SQL) does this?

You replied with SQL (but not which SQL) along with cPanel which neither appear to do what you ask.

Sounds like you need to create a new system or app here. For now all the systems I've seen have just one admin and some have backup admins but not one did what you asked. Also, I've yet to see a program or app to do what you ask. All that means is you get to create this.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.