Application for execute SQL query with readonly mode C#

Question

0.00/5 (No votes)

See more:

, +

I have a requirement that design an application in C# to execute SQL statement(Same as like Sql query analyzer).This application should work like a read access mode(only select). i don't want to change SQL server user privilege and also there is no restriction in application for execute sql commands.

For example

SQL

Query 1
CREATE TABLE Table(Col1 int,Col2 Int)
INSERT INTO Table(col1,Col2) VALUES(1,2)

Query 2
CREATE TABLE #Table1(Col1 int,Col2 Int)
INSERT INTO #Table1(col1,Col2) VALUES(1,2)

Select * from Table2 as A 
JOIN #Table1 AS B ON A.Col1=B.Col2

As you see above script, if you execute the Query1 application has to throw error, Query2 should work fine.

What I have tried:

Server=myServerAddress;Database=myDataBase;User Id=myUsername;
Password=myPassword;application intent=readonly

Posted 3-Aug-16 22:03pm

Murugesan Solaiyappan

Updated 7-Aug-16 17:06pm

Add a Solution

Comments

RossMW 4-Aug-16 4:10am

If you are only executing select statement why don't you just check the SQL statement for key words to check if it should be run?

2 solutions

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

prateekfgiet · Answer 1 · 2016-08-04T23:41:00

Solution 1

in application you need to check string for
update
delete
cretae with # keyword
if string contains above mentioned keyword then application will throw exception "user don't have right for insert update and delete"

Posted 4-Aug-16 23:41pm

prateekfgiet

vani suresh · Answer 2 · 2016-08-07T17:06:00

Hi Murugesan,

Here is the query

SQL

SELECT * FROM fn_my_permissions('dbo', 'SCHEMA')

The query result will be "subentity_name", "Permission name".

write a stored procedure to get a permission name and pass a parameter username.(Get this username from application).

//Code in c#

Inside the button click call the stored procedure and check the codition.
If condition is false then display an message box("user doesn't have an access")

Thanks
:)