Hi Mike,

Thanks for the explantion. I see why it is slower.

So I'm back to square one. I could make my Stored Procs build an SQL statement and EXEC it. This would give me back my performance but I'm hung up on the security issue. I'd like to NOT allow the users to have privileges on the tables. Only the Stored Procs. How do developers/DBAs get around this in a practical manner? Or am I being too idealistic?

Is it realistic to grant a privilege, issue the EXEC, and revoke the privilege?

Guy