SQL Server Database

Development Best Practices

Grant Fritchey, Red Gate Software

[email protected]

Jeremy Kadlec, Edgewood Solutions

[email protected]
 Agenda
• Introductions
• Best Practices
– Design, Build, Test, Deploy, Tools
• Demos
• Q&A and Thank You
• Special offer for all attendees

Copyright (c) 2006-2012 Edgewood Solutions, LLC All rights reserved 2

 Grant Fritchey
• Product Evangelist for Red Gate Software
• Microsoft SQL Server MVP
• Author:
– SQL Server Execution Plans
– SQL Server 2008 Query Performance Tuning
Distilled
– SQL Server MVP Deep Dives II

Copyright (c) 2006-2012 Edgewood Solutions, LLC All rights reserved 3

 Jeremy Kadlec
• Edgewood Solutions - CTO
• [email protected]
• 410.591.4683

• MSSQLTips.com - Co-Founder
• Twitter - @MSSQLTips
• LinkedIn -
http://www.linkedin.com/
groups/MSSQLTips-2320891

• Baltimore SQL Server Users

Group - Co-Leader
• www.bssug.org

• SQL Server MVP

Copyright (c) 2006-2012 Edgewood Solutions, LLC All rights reserved 4

 Design Best Practices

Build a Strong Foundation

Comprehensive Data Modeling

Right Technology @ Right Time

Copyright (c) 2006-2012 Edgewood Solutions, LLC All rights reserved 5

 #1 – Build a Strong Foundation

Complete
Requirements
Stable Platform • Correct Level of
• Appropriate Detail
Cohesive Team Technology • Agreement
• Correct Skills and • Meet Performance
Needs
Scope & Training
Support • Accountability
Forward • Managerial
Thinking Support
• Business Goals • Reasonable
Expectations
• Long Term Needs

Copyright (c) 2006-2012 Edgewood Solutions, LLC All rights reserved 6

 #2 – Comprehensive Data Model

Growth
Scalability
Flexibility
• Set the standard - Build a Data Modeling Checklist for your company
• Make the Data Dictionary mandatory
• Store meta data in your SQL Server database
• Include object, column, relationships, sample data, etc.
• Maintain with your releases
• Include in code reviews and source control

Copyright (c) 2006-2012 Edgewood Solutions, LLC All rights reserved 7

#3 - Right Technology @ Right Time
• Holistic view
• Build technical plan
Plan Options • Seek alternatives
• Mitigate risk with new
technologies
– Proof of concept
Proof of
Concept
Experience • Pull from experience
• Document and discuss
with team

Copyright (c) 2006-2012 Edgewood Solutions, LLC All rights reserved 8

 Build Best Practices

Leverage Your Sandbox Environment

Build on Your Experience

Prioritize Security

Copyright (c) 2006-2012 Edgewood Solutions, LLC All rights reserved 9

 #4 – Leverage Your Sandbox Environment
• Functional environment
to match production Feature
Enhancements

• Ability to setup quickly

and begin development
Functional
• Intended for personal or
environment
small group usage to match
• Ability to build and production
Prototype Greenfield
recreate as needed Development Development

• Isolated so no impact to
other team members

Copyright (c) 2006-2012 Edgewood Solutions, LLC All rights reserved 10

 #5 – Build on Your Experience
 Naming conventions  No functions in WHERE clause
 Comment code  Avoid cursors, temp tables,
 Parameters in tables triggers, etc. when a better
 Consolidated error handling solution is available
 Referential integrity, data  No views on top of views on
types, indexes, etc. top of views
 Select correct technology  Don’t throw hardware at a
database design problem
 Review query plans
 Verify code before check-in
 Code reviews
 No code susceptible to SQL
 Check-in procedures Injection

Copyright (c) 2006-2012 Edgewood Solutions, LLC All rights reserved 11

 #6 – Prioritize Security
• “From 2005 through to September 20, 2011, SQLinjection has been
responsible for 83% of successful hacking-related data breaches.”
– http://blog.imperva.com/2011/09/sql-injection-by-the-numbers.html

• “…from 2005 to September 20, 2011. There were 312,437,487 data

records lost due to hacking with about 262 million records from various
breaches including TJMax, RockYou and Heartland, all of which were SQL
injection attacks.”
– http://blog.imperva.com/2011/09/sql-injection-by-the-numbers.html

• “In the wild, it has been noted that applications experience, on average, 71
attempts an hour.[1] When under direct attack, some applications
occasionally came under aggressive attacks and at their peak, were
attacked 800–1300 times per hour.”
– http://en.wikipedia.org/wiki/SQL_injection#cite_note-blog.imperva.com-0
Copyright (c) 2006-2012 Edgewood Solutions, LLC All rights reserved 12
 Test Best Practices

Coordinate Parallel Development

Close the Loop

Copyright (c) 2006-2012 Edgewood Solutions, LLC All rights reserved 13

 #7 - Coordinate Parallel Development
Release 1.1

Hot Fix 1.1.1 Customer Release

Issues
Object

Release 1.2.2

• Coordination requires communication, comments and notation

• Prevent “Code Jambalaya“ from causing chaos and frustration

Copyright (c) 2006-2012 Edgewood Solutions, LLC All rights reserved 14

 #8 - Close the Loop
Review
Requirements

User Involvement Build Test Cases

Promote to Test Development

Verify
Track Changes
Requirements

Copyright (c) 2006-2012 Edgewood Solutions, LLC All rights reserved 15

Deployment Best Practices

Avoid Deployment Catastrophes

Copyright (c) 2006-2012 Edgewood Solutions, LLC All rights reserved 16

#9 – Avoid Deployment Catastrophes
Don’t deploy suspect code,  Build rollback scripts as your
apply the brakes insurance policy
Don’t let any changes sneak  Deploy the same scripts to
into the environment Test as Production
Don’t assume things will – Rollback deployment and re-
just work out deploy until error free
Don’t take someone’s word  Double check your
that code is accurate deployment scripts for
accuracy
– Remember “Code Jambalaya“
 Ensure deployment is
verified, do not find out
from users

Copyright (c) 2006-2012 Edgewood Solutions, LLC All rights reserved 17

 Tools Best Practices

Build Re-Useable Templates

Standardize Tools and Methods

Copyright (c) 2006-2012 Edgewood Solutions, LLC All rights reserved 18

 #10 – Build Re-Useable Templates
• T-SQL Templates • Benefits
– Integrate with SSMS – No “blank slate”
– Template projects syndrome
– Data dictionary – Standardization
• Integration Services – Set expectations
– Import processes – Time saver
– Export processes
• Reporting Services
– Connection objects
– Headers, footers, etc.

Copyright (c) 2006-2012 Edgewood Solutions, LLC All rights reserved 19

#11 – Standardize Tools and Methods
• Methods
– Data Access
– Comments
– Deployment
– Rollback
– Communication
• SQL Server Tools
– Development
– Continuous Integration
– Source Control
– Refactoring

Copyright (c) 2006-2012 Edgewood Solutions, LLC All rights reserved 20

Next Steps
Offer red-gate.com
For all webinar registrants
 SQL Source Control - $99
 SQL Developer Bundle - $200 discount
28-day free trial
Email [email protected]
Quote code “webinarmssqltipsmarch2012”
One offer per organization

14-day free trial