SQL Server

Is it possible to show only the database that a user has rights to when the log in to SQL Server 2008? As the system is set up currently the user can see all the database on the server and have to search through the list of database to find their database.

We are trying to find a way to truncate (i.e. drop all the extra decimal places) in SQL Server. We do not want to have the number rounded at all just truncated as is.
For example:

declare @variable decimal(18,2)

set @variable = 123.456


This will cause the value stored in @variable to be 123.46 (the rounded variable). However this is not what we want. We want the value to be stored as 123.45. Is there an efficient way to remove the decimal places that I do not need in SQL SERVER?

I’m wondering if using parameters in SQL Server queries is enough to prevent SQL injection. Is there any way a parameterized query be used to cause a SQL Server Injection?

I know about @@IDENTITY and IDENT_CURRENT and SCOPE_IDENTITY in Sql Server but don’t understand the pros and cons attached to each.

Can someone please explain the differences and when I should be using each?