I'm not sure if this is a bug or by design, but in our testing of the end user report designer we have come across an issue that we have to resolve.
We were able to use the report designer to delete data from the database. Under sqldatasource, we clicked the "add query" button. In the dialog that opens under "SQL string" we typed in "delete from tablename" and then clicked next and finish on the dialog.
Once the dialog closed it executed that statement and deleted all of the data from our table.
Ideally the dialog would only allow the user to enter a SQL Select statement.
Can we disable the add/delete/edit buttons for queries in the report designer? We will be programatically adding the queries to limit the data tables that the end user can see and add to the report.