Ask HN: Production database access and separation of duties

What kinds of policies around production database access do you have where you work? Do your developers have direct access to production databases for troubleshooting, or do they have to ask a DBA or ops team to pull data for them? If they can access them directly, is there an approval process they're supposed to follow before they do?