Stored procedures can be coded that access only row-and/or column level subsets of data. (The ability to execute these stored procedures can then be granted to users. If no privileges on the underlying base tables are granted, the users will be able to access the data only by executing the stored procedure, thereby providing the requisite security.