Admin vs Developer, or how to set up a good environment

Most of us know the video between Paul and Bill from the last lotussphere.



My colleague Tom and I have the same discussions a lot of the time . I tease him by telling him I'll revoke his rights more and more, and actually that's not a bad idea.

But how do we keep a workable situation? The best would be an OTAP (or DTAP in English, a form of the waterfall model) environment.



This fully separates the development and operations side off things. But what is the best way to promote stuff? Template refreshes? But how do you manage signoff for testing?

I'd like to hear your thoughts on this!