You are designing an application that will use Entity Framework to access a SQL Server database. The application must adhere to the following security requirements:

* Applications cannot store connection strings that include user and password information and applications cannot prompt the user for this information.
* Nonadministrator Windows logins can only be granted permission to read from tables and execute stored procedures.

You need to ensure that your connection type and Entity Data Model meet these requirements.

What should you do?

To help limit access to your data source, you must secure connection information, such as user ID, password, and data source name. In order to avoid exposing user information, use Windows authentication (sometimes referred to as integrated security). Windows authentication is specified in a connection string by using the Integrated Security or TrustedConnection keywords, thereby eliminating the need to use a user ID and password. With Windows authentication, Windows authenticates users and access to server and database resources is determined by granting permissions to Windows users and groups. Because users are not granted write access to tables, table modifications must be done with stored procedures. This means you must configure stored procedures for entity update, delete, and insert operations.