Adriaan,

If we are concerned about Security, you can just hard code the username and password in the DataSource Credentials Tab.

As far as DatabaseName and ServerNamer are concerned, you don't have to pass in the full database ans servername in the url.

if your ServerName XYZDallas and DatabaseName is ABCDB

just pass in "Dallas" and "DB" and hard cord their prefixes in the connection string. so the user would not know what the actual database name is...

="data source=XYZ" & Parameters!Server.Value & ";initial catalog=ABC" & Parameters!Database.Value

If you want to maniplulate through a class library, you still are hardcoding server and database information in there. you will not have the luxury to pass in whatever u want.