>could be solved with appbased login security.

Let me flesh this out a bit more...

To render code the way you suggest would require substantial privledges for the db-login. On the other hand, if the call is a stored proc, the the db-login used would only need minimal privledges since there would be a trusted relationship between the proc owner - which likely has some level of admin rights - and the db-login that has nothing more than execute rights - without admin privledges.

You know...everything works fine when you login as sa....< s >....