Bert,

>>Surely it must be possible to create a view, give the role rights to that
>>view and let the stored procedure operate upon the view?
>well that's possible for part of the problem. but I am not sure I can
>create a view that only displays rows which "belong" to the current user
>(one column will be the user id).

I think CURRENT_USER is a variable in FB1, so having a view with

WHERE <your user id column> = CURRENT_USER

just might solve your problems.

HTH,
Set