Coffeehouse Post

Single Post Permalink

View Thread: Microsoft still in denial
  • User profile image

    , DCMonkey wrote


    So now I've got to gin up a web service layer when all I wanted to do was connect to a SQL server on the LAN. Got it. 

    Wait ... you were going to give SQL creds to every user of your software? (or worse - have no authentication to the SQL server!?) Have you heard of computer security?

    Set up a HTTP service. That way you're abstracting your app from the implementation of the database, you get to perform user-based authentication later and you can limit people's ability to root your SQL server and take all of your company's information.

    SQL is dangerous. Don't let users (even users from your own company) write their own.