"I use tools for that (either generators or O/RM)." As long as you know what your tools are doing. "If you don't trust your devs and applications against the

"I use tools for that (either generators or O/RM)." As long as you know what your tools are doing. "If you don't trust your devs and applications against the DB, you've already lost." No distrust is necessary. Consider developer error: mandating and restricting access to databases through SPs assures certain mistakes cannot happen (and makes clear where responsibility lies should they happen). This actually protects the developer. And many serious security attacks occur from inside an organization. Some corporations are criminally liable for violations of access: see the Sarbanes-Oxley Act. "SP security is just mainframe-thinking and a lost cause." "Mainframe-thinking" is increasingly relevant as data centers continue to centralize. You ignored what I said about efficiency. Indeed you ignored most of what I said. I sense you have an axe to grind but it's missing a head. Another developer error? Perhaps you can ask your DBA for a proper weapon?