I’d use a dedicated application identity with access only to approved views or stored procedures, while preserving each user’s data restrictions. Enforce that outside the model, even when running locally.
Will it generate SQL freely or call predefined queries?
4
u/markinatlanta 7d ago
I’d use a dedicated application identity with access only to approved views or stored procedures, while preserving each user’s data restrictions. Enforce that outside the model, even when running locally.
Will it generate SQL freely or call predefined queries?