April 8, 2017 at 6:18 am
Good post, good work, and nice use of It depends."
My approach is to stay "in the box" as much as possible and when I venture from "the box," document as much as possible.
:{>
Andy Leonard, Chief Data Engineer, Enterprise Data & Analytics
April 9, 2017 at 6:48 am
Good post, I agree with the use of it depends and that is by design. As for the use of an SSRS report to modify data, I disagree that this is a bad thing. I have done this before and am in the process of deploying a report that allows the business to set targets through parameters captured on a report. There are good reasons why developers particularly in the BI space would do this. Off the top of my head:
I think it is all very well to point out the security risk with using a report to update data but it would be better to understand why the report developers have resorted to this solution and even better to give advice on a setup that will protect the client from security issues.
April 9, 2017 at 11:25 am
Heh... I rank the term "By Design" and, especially, the term "Operates as Designed" right up there with other "lameties" (to coin a phrase and is similar to the well intentioned but still annoying "lame ties" that get hung around our necks on Father's day đŸ˜‰ ) such as "We've always done it that way" and "We've never done it that way before".
As for the "Quirky Update", people use such things because they have a need and don't want to wait a day for a supported method to work. On that note, let's think about it... MS Access has had running totals for a very long time. Why did MS not think it important enough to incorporate in SQL Server for over 2 decades? Both are Microsoft products so they can't actually use the "We've never done it that way before" lamety as an excuse. Instead, they use the "By Design" excuse.
Now, if we could just get them to fix PIVOT and a couple dozen other things so they work as well as they do in Access. And what the hell "By Design" process where they thinking of when they "designed" the new splitter function in 2016? And then there are things like the relatively new FORMAT function. I can't believe that they actually did any performance testing there. "By Design", it's comparatively and horribly slow.
Don't get me wrong. I love SQL Server but, "By Design", it's not all that it could be or should be.
--Jeff Moden
Change is inevitable... Change for the better is not.
April 9, 2017 at 7:49 pm
Um, no. Do it right the first time.
April 10, 2017 at 5:24 am
I agree that the "fix and inform/advise" solution was the most professional. They probably needed an immediate fix so couldn't wait. The fallout if they fail to take your advice is on them. Just like the benefits would be if they did the work.
Gaz
-- Stop your grinnin' and drop your linen...they're everywhere!!!
April 10, 2017 at 5:56 am
While there are, as stated, obvious risks to updating certain types of data via reports, I think it's highly unlikely that this ability would be removed. That would then mean that SSRS would no longer be an option in areas where access to data must be logged - and when, for example, the report / sp logs the date, time and user name with parameters to an audit table.
I'm a DBA.
I'm not paid to solve problems. I'm paid to prevent them.
April 10, 2017 at 6:01 am
GeorgeCopeland - Sunday, April 9, 2017 7:49 PMUm, no. Do it right the first time.
That raises the question of 'what is right' though. If there is a senior user breathing down your neck, with even more senior users breathing down theirs, right is sometimes quick and dirty. If there is a formal request put through proper channels and you have all the time in the world then there is no immediate reason to use unsupported features or workarounds. If it becomes apparent that what is requested cannot be done through standard methods then perhaps an unconventional approach is appropriate. However if that is the case then the user needs to be consulted. It may be that when they discover that what they've asked for means additional delays, cost and complexity they would rather do without.
How to post a question to get the most help http://www.sqlservercentral.com/articles/Best+Practices/61537
Viewing 8 posts - 1 through 7 (of 7 total)
You must be logged in to reply to this topic. Login to reply