Question

I am working on an application that will allow users to create queries on their own to view data in their database. However the stipulation is that the application should prevent any modification of the tables and data stored in the database. The Application will be written in C#. Any good suggestions of how this could be done? Possible idea that I have thought of:

• Parse SQL to filter for any reserve word that may alter data(i.e. insert, alter, ect)
• There maybe a setting that may prevent modification from this applications connection.

Any suggestion to block any changes made from this application to prevent any chance of a user error or attempt to modify tables of data is much appreciated.

Answer 1

You should run your queries as a user that doesn’t have write permission.