Hi,

I have a stored procedure, which is inserting/deleting some records for some tables. I have given the grant like;
grant execute on procedure sp_insert_records to user5;

He only knows how to connect to the database and the name of the stored procedure he will run, with the defined parameters. He doesn't know any other object name in the database. I don't want this user to do anything else in the database other than just executing the stored procedure.

But, because the stored procedure is inserting/deleting records to some tables, I need to give insert/delete grants to user5 for that tables.


So, I am afraid, if user5 knows the names of the tables, he can cause problems.

Is there a way to give user5 just to execute the stored procedure and nothing else and still have the capability for inserting and deleting?

Thank you for any ideas