Does the user who is executing the stored procedure containing the delete request require permission to delete?
No, and this is one of the reasons why you can abstract such operations into a stored procedure. All user needs are EXEC permission provided in the stored procedure. This is because the author of the stored procedure suggested that he allowed only valid cases of deleting records from the table.
they need to be allowed to delete a record from the table only when they execute a query that is not a stored procedure.
That's right, they need DELETE permissions in the table to delete a record using the DELETE DML operation.
Vikdor
source share