hii..frnds...i am unable to write a generalized syntax for the update delete insert statments..i mean that if i want to delete a selected row than i am able to do that by specifying the id number of that row,but for remaining ids it doesnt work..so that piece of generalization is what i want..plz help me
delete from student where rollno='12';
this is generally how we delete....and in generalized format
delete from student where rollno=@rollno;
but the above line is giving me error stating tht @rollno should be declared as a variable.
i am unable to solve it.....
You see we can give you a Solution, but now, your English is not good and you dont get into detail about your problem, you just shoot us with long incomplete statements. take your time and explain your problem and we will step by step help you solve your problem. and lastly you should post this in C# Forum noy here. But as you already done it here you might as well continue
Sorrow is Better than Laughter, it may Sadden your Face, but It sharpens your Understanding
I already answered your first post on this, I'm sorry if you don't understand but here it isagain:
The best option in my opinion is to use windows groups to limit user access. It still uses windows authentication so no password verification etc, and you can then grant explicit permissions to the group. You can deny permissions as well as grant them, so deny select, insert, update, delete on your tables and grant exec on the stored procs.
Its a standard way of doing it and easy to maintain by scripts.
The login to the application is wrote not in C# but SQL store procedures. I press a buttom that triggers a SP that manages the login. my connection strings have both no password and user.
From this I must assume you are alreay using windows authentication, so you need to set the table permissions as I said. This will prevent someone attaching to you database and seeing the tables. I'm not sure how to explain thsi any clearer, but try google for granting permissions in sql server, it may help your understanding.
check the store procedures folder if it is already there!
use alter procedure to change it.
i usualy set the database on which i write on sql server up-left corner combobox. i don´t not use code but you can do that, do you need to code that?
create procedures like this (with inner join)
create procedure vendas_criadas
@data_ini as smalldatetime,
@data_fim as smalldatetime
select ve.id_venda as 'ID Venda',al.nome as 'Album',cl.primeiro_nome+' '+cl.ultimo_nome as 'Cliente',ut1.primeiro_nome+' '+ut1.ultimo_nome as 'Criador',ve.id_utilizador_criador_data as 'Data Criação'
from dbo.vendas as ve
inner join dbo.albuns as al on ve.id_album = al.id_album
inner join dbo.clientes as cl on ve.id_cliente = cl.id_cliente
inner join dbo.SPY_utilizadores as ut1 on ve.id_utilizador_criador = ut1.id_utilizador
where ve.data_registo between @data_ini and @data_fim