CTE in DevExpress report designer

Hey Tim,

I'm not sure if I understand your question for the full 100%… but I believe that this error notification is a security measure taken by DevExpress to prevent SQL injections: https://supportcenter.devexpress.com/ticket/details/bc3280/default-validation-for-custom-sql-queries-allows-only-select-statements

I also noticed by executing a short search that it is possible to disable this specific validation: https://supportcenter.devexpress.com/ticket/details/t395653/a-custom-sql-query-should-contain-only-select-statements-when-moving-from-15-1-4-to-15

Is it an option to move the CTE to the underlying view that is called upon by the DevExpress report and use the CTE to compile the required data, that you can then call upon from the DevExpress report? Personally I prefer this option because it also simplifies the possible future maintenance on the report.

Hi @tim, 

Can you please let us know if you still require assistance regarding this topic? Or has Renée her answer helped you out?

Hi,

I checked this link https://supportcenter.devexpress.com/ticket/details/t395653/a-custom-sql-query-should-contain-only-select-statements-when-moving-from-15-1-4-to-15 but I can’t find the property DisableCustomQueryValidation in DevExpress report deisgner. I’m using the report designer from Thinkwise Community Portal.

Hi Tim,

For as far as I can see, this option is False by default and cannot be switch to True currently. I have set out a question to my colleague that managed the product. Once I have response, I or he will reply here.