Implementing security in Entity Framework

Question

At my client site the database user has permissions to execute stored procedures only.

Database user doesn’t have permissions to execute queries directly.

But I have used Entity Framework, and no stored procedures used.

What can I do?

Ladislav Mrnka · Accepted Answer · 2011-11-04 09:24:44Z

1

In such scenario it is better to use native SQL + ADO.NET directly. The main power of EF is in mapping, linq / ESQL querying and loading strategies. Once you are limited to stored procedures you will lose support for latter two = no querying and no loading strategies. You will still have support for mapping but it will come with performance costs and it will demand strict limitations on your stored procedures.

answered Nov 4, 2011 at 9:24

Ladislav Mrnka

365k60 gold badges666 silver badges673 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Wouter de Kort · Accepted Answer · 2011-11-04 07:54:45Z

0

The Entity Framework allows you to map each entity to a set of stored procedures that will execute the insert, delete and update.

That way the user won't have to execute queries directly when modifying the data in your database.

If the user also doesn't have Select permissions, you need stored procedures to access the data. The Entity Framework can help you because you can import Stored Procedures in the SSDL part of your EDMX and then you can map those stored procedures to functions on your ObjectContext.

answered Nov 4, 2011 at 7:54

Wouter de Kort♦

40k13 gold badges88 silver badges104 bronze badges

1 Comment

Kuttan Sujith Over a year ago

How can we do this?any use full links?

Collectives™ on Stack Overflow

Implementing security in Entity Framework

2 Answers 2

Comments

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related