Code Parser Control

Question

Code Parser Control

ganeshmuthuvelu

SSCrazy

Points: 2177
More actions
February 17, 2007 at 3:15 pm

#95162

Hello,
In our .NET application, we allow end users to write their own query and then return data to the client.. The place where the user writes the query now is a simple text box that allows multiple lines.. Instead, I would like to have some kind of control that is SQL Server code aware, gives the ability for color coding, check the syntax of the code etc., something similar to the Query Analzyer window so that end user can validate the query before actually running it and also clearly see their query with the same Query Analyzer look and feel..
Is there any such control available in the market that I can purchase or someone has any pointers for my needs?..
Thanks for your help.
Ganesh

Viewing 3 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply

schleep SSChampion Points: 12587 More actions · Answer 1

How many users? How educated, as in knowledge of SQL and DBs, are your users? How big is the DB? (Think about it: forget one join clause, and the query runs for hours.) What if they decide to update or delete?

On it's face, giving users such access is absolutely The. Worst. Thing. you can do.

Lowell SSC Guru Points: 323546 More actions · Answer 2

you can send the query to SQL with the following options:

SET NOEXEC ON

SET PARSEONLY ON

SELECT * FROM SOMETABLE

SET NOEXEC OFF

SET PARSEONLY OFF

you could then simply return the errors returned from SQL, ie table SOMETABLe does not exist.

I've done this myself, and simply added extra validation to not permit INSERT / UPDATE / CREATE / DBCC and some other commands, as I want them to do SELECT statements only.

Lowell

--help us help you! If you post a question, make sure you include a CREATE TABLE... statement and INSERT INTO... statement into that table to give the volunteers here representative data. with your description of the problem, we can provide a tested, verifiable solution to your question! asking the question the right way gets you a tested answer the fastest way possible!