Understanding of permissions

From: Jon Rosenbaum (jrosenbaum@sscinc.com)
Date: 03/06/03

From: "Jon Rosenbaum" <jrosenbaum@sscinc.com>
Date: Thu, 6 Mar 2003 09:50:27 -0500

I have a database with stored procs that handle the record
insert/update/delete requests so that our application's front end is not
directly issuing these commands. If I set up a user on the database with
execute permissions on the stored procs, how come the user would still need
SELECT permissions if the proc issues a select statement? Would this logic
filter through the other permissions as well? The whole point of this
permission set up is to not allow the user to directly make any
modifications to the data.

Any insight would be appreciated.