>EM: I didn't say 90% of _apps_ are trivial. I said 90% of cases are. Nearly all apps have some non-trivial data access needs, and this is where I was prescribing SPT or SP. Remember, nothing says it has to be an all-or-none deal.
>
>JVP: Fine. I prefer to use an approach that works in all cases. i.e., I don't
> like using one approach for trivial work and another approach for non-
> trivial work.

Preference is the key word here. That's what I've been trying to say all along.


>JVP: Our middle-tier does not have the password. The middle tier is totally generic. If your middle-tier items have this type of information - I would suggest you rethink your design...If you want to instantiate our data classes, you need to provide a login and password.

> As far as dataclas goes, you can use an ASP script to hand in the specific
> DB login info. FWIW, as long as somebody can get into the app, they can
> get into the DB.

Isn't server-side script part of the middle tier? So your middle tier has the login information. I don't get it, you told me this was bad design.

>HTH...

It has.