A very good practice is to use SQL Server stored procedures for data modification and data retrieval. Stored procedures provide many benefits. Some of the benefits include:
- Data abstraction: Client applications don't need to work with the data directly; they rather call the stored procedures. Underlying schema might even get modified without an impact on an application, as long as you change the stored procedures that work with the objects with modified schema appropriately.
- Security: Client applications can access data through stored procedures and other programmatic objects only. For example, even if an end user uses their own SQL Server Management Studio instead of the client application ...