Best Practices - In the app or in the DB

[JayKusch]

Can anyone point me to the most recent Best Practices on dealing with the data layer?

I am looking for doc/man/whitepaper that relays what is the best method for data access.

trying to find rules and such that say it is better to leverage stored procs, UDFs, UDDTs and such in the database that to have them hard coded within the app itself.

Thanks

J. Kusch

 

[jrbarnett]

I can't think of any specific reason, but as a general rule, if you can keep data processing(inserts, updates, deletes) done at the database level and either called from other stored procs or from your application, then it will be mostly fine.
Using stored procedures for your application to run gives data security to your application, since it only needs permission to run (execute) the procedure rather than access the underlying database tables.

John