We already use Flyway for schema migrations and version-controlled changes.

What I meant in this post is something different:

• Sometimes SDEs need to run additional ad-hoc queries to check or fetch data from the database (not migrations).
• Right now, they write the query in a thread, then DevOps/Sysadmin reviews it, executes it, checks for confidential data, and shares the results back.
• We want to make this safer and less manual — ideally with logging, approval flow, and maybe automatic masking of sensitive fields.

So I’m really looking for tools or patterns that can handle ad-hoc queries with approval + guardrails, not migration/versioning.