LarrySteele
Programmer
Currently working on an Access project with clients connecting to SQL Server 2008.
The network is very slow, so need to minimize traffic to/from the server. Additionally, the system contains personally identifiable information, so data access control is critical. Another issue of concern is sql injection attacks. With these three concerns, I've chosen to use ADO to execute SP's, passing criteria as parameters.
This method has worked well for the forms - data access is efficient, sql injection is buffered, and no people data is stored on the client.
Yesterday I started working on reports and hit a wall as to how to create an unbound report w/ subreports using parametrized procs.
My current work around is to run the procs, and store the data in local usys tables. This works, but it violates my goal of not have any local tables w/ server data.
Is there a better method for getting the data from the server for my reports?
As always, thanks for any suggestions.
- Larry
The network is very slow, so need to minimize traffic to/from the server. Additionally, the system contains personally identifiable information, so data access control is critical. Another issue of concern is sql injection attacks. With these three concerns, I've chosen to use ADO to execute SP's, passing criteria as parameters.
This method has worked well for the forms - data access is efficient, sql injection is buffered, and no people data is stored on the client.
Yesterday I started working on reports and hit a wall as to how to create an unbound report w/ subreports using parametrized procs.
My current work around is to run the procs, and store the data in local usys tables. This works, but it violates my goal of not have any local tables w/ server data.
Is there a better method for getting the data from the server for my reports?
As always, thanks for any suggestions.
- Larry