>>You should look into using a application role. It is designed for just what you are talking about.
>
>Can you tell me more? Is that a MM.NET or SQL capability?

It is a SQL functionality. Basically, someone with no rights to the database can still use your app cause you set the connection to the application role. It works very well in traditional 2 tier client server aps.