Hi Dave,
The short answer to your question is:
The only thing you need to access/modify a VFP table is a copy of VFP and permission to access the file. SQL Server lets you set individual or group permissions at varying levels of the database (database, table, view, etc.) and also on whether or not the access is being gained directly or through an application.
In SS a user must be specifically granted permission to access a database, then specific permission must be granted to select, insert, delete, and update each table. Specific permission must be granted to execute each stored procedure.
Administration of all this is quite easy in the later versions (7 and above).
HTH
Regards
Bob Tracy
Never engage in a battle of wits if you're only half armed.