For a web application database, from a security standpoint only, what are arguments counter to the point for an sp only solution where the app db account ha
This is one of those areas where conventional wisdom is correct: exposing just the stored procedures gives you more control over security. Giving direct access to tables and views is easier, and there are times you need to do it, but it's going to be less secure.