Tim,

I could not agree with you more... They only tell us the problem, it is up to us to come up with the solution...
In their world there is no such thing as "Trusting" the developer..

>Is the data access being done all through stored procedures? If so would they let you have a userid and password that only has
> access to the stored procedure execution needed for the application?
No.. We cannot have the user id/password for anything on the production server.




>
>
>I am not a SQL server expert but isn't that like saying I expect you to login to something but you are not allowed to have a userid and password? What do they expect you to do with that?
>
>Is the data access being done all through stored procedures? If so would they let you have a userid and password that only has access to the stored procedure execution needed for the application?
>Tim