[dba-SQLServer]Stored Procedures and Arrays?

Martin Reid mwp.reid at qub.ac.uk
Wed Aug 13 20:59:26 CDT 2003


I have successfully argured against the proposal and we are going with
Stored Procedures (<:

Martin


----- Original Message ----- 
From: "Francisco H Tapia" <my.lists at verizon.net>
To: "dba-sqlserver" <dba-sqlserver at databaseadvisors.com>
Sent: Wednesday, August 13, 2003 10:06 AM
Subject: Re: [dba-SQLServer]Stored Procedures and Arrays?


> Since you are passing the table name I can only assume that this sp is
> creating a dynamic SQL, for this to work efficiently your users will need
> direct select rights to the table instead of simply just EXEC rights on
the
> procedure.  The common practice is to disable all rights to tables to you
> users and have them go through views and sprocs.
>
> just my 2 cents.
>
> -Francisco
> http://rcm.netfirms.com
>
> On Wednesday, August 13, 2003 12:56 AM [GMT-8],
> Martin Reid <mwp.reid at qub.ac.uk> wrote:
>
> : Hi All
> :
> : Any comments on the following in terms of performance or anything
> : else that springs to mind. I have a couple of concerns over this
> : approach re recompiling of the SP every time it is called.
> :
> : Say I want to build a drop list on the form for the user to select
> : from and the drop list is from a table.  Now, the application has
> : many forms with drop lists. Instead of having a separate SP for each
> : drop list, we create a generic SP that accepts the field names as a
> : string separated by commas.  In my code, for each form, I would
> : define what these fields would be in an array.  Then, with the VB
> : join function, the array is made into a comma separated string of
> : strings that is passed, along with the table name, to the generic
> : stored procedure.  The stored procedure will take these two
> : parameters and convert it into a select statement, process it and
> : return the data for my code to process into the drop list.  Another
> : parameter can be passed for setting the field or fields that are used
> : for ordering the data (for example order by name).
> :
> :
> : Martin
> :
> : _______________________________________________
> : dba-SQLServer mailing list
> : dba-SQLServer at databaseadvisors.com
> : http://databaseadvisors.com/mailman/listinfo/dba-sqlserver
> : http://www.databaseadvisors.com
>
>
> _______________________________________________
> dba-SQLServer mailing list
> dba-SQLServer at databaseadvisors.com
> http://databaseadvisors.com/mailman/listinfo/dba-sqlserver
> http://www.databaseadvisors.com
>
>



More information about the dba-SQLServer mailing list