The ability to deploy to production is somewhat dangerous, so development shops would likely restrict this to designated client users only (e.g. after they've signed a waiver). Another possibility is time restrictions (only during normal business hours).

If any non-developers are allowed to deploy straight to production, we should do something to verify that the site is working correctly with the new code on staging before we deploy. Perhaps we can just check that (a) no errors occurred during the deployment to staging, and (b) an HTTP request to the front page of the staging site returns a 200 response. If all is good with those, deploy straight to production.