Programmatically, you do this with the DENY and GRANT T-SQL statements. You can look those up in SQL Server Books Online (the help file that ships with SQL Server) to get the full syntax. But as an example, say you have an Authors table, a GetAuthors SP and an account named Fred. You could use DENY and GRANT as shows below to allow Fred to only access the Authors table though your SP and no other way.

DENY ALL [PRIVILEGES] ON Authors TO Fred
GO

GRANT EXECUTE ON GetAuthors TO Fred
GO

>Hi,
>
>I read that one of the security way is to prevent user
>all access to the database tables from select/update/delete command.
>
>howeve, it recommend us to give permission for Stored procedures (SP)
>to select those tables. How do I do it programmtically.
>
>Any other way to improve my SQL server 2000 security
>
>
>pls advise. Thank