Visual Basic® .NET Database Programming

Summary

Using SQL Server stored procedures, you can create user logins and give the users access to different databases. Using the SQL statements GRANT, DENY, and REVOKE, you can control which users can perform what actions. Roles and views give you methods for controlling access to groups of users without forcing you to manage each user individually.

Using these techniques, you can give as much or as little access to the data as you want. A standard rule of thumb is to grant the fewest privileges possible to get the job done. That gives the server and the database as much protection as possible against damaging changes, whether accidental or malicious. If you later discover that a user needs an additional privilege, you can add it then. It ...