I agree with both of you, although have never set up a DB in either style :) One small point: the proposed stored procedure approach seems, qualitatively to me

I agree with both of you, although have never set up a DB in either style :) One small point: the proposed stored procedure approach seems, qualitatively to me, to be less error-prone. The consumer in the sproc approach either does or doesn’t have access to specific sprocs, while managing fine-grained per-column permissions seems easy to screw up in either a too-liberal or too-restrictive way.