Stored Procedures vs No Stored Procedures - Security Viewpoint

后端 未结 9 652
时光取名叫无心
时光取名叫无心 2020-12-29 11:26

For a web application database, from a security standpoint only, what are arguments counter to the point for an sp only solution where the app db account ha

9条回答
  •  佛祖请我去吃肉
    2020-12-29 11:48

    This is one of those areas where conventional wisdom is correct: exposing just the stored procedures gives you more control over security. Giving direct access to tables and views is easier, and there are times you need to do it, but it's going to be less secure.

提交回复
热议问题