Stored procedures or OR mappers?

Question

Which is better? Or use and OR mapper with SP\'s? If you have a system with SP\'s already, is an OR mapper worth it?

Answer 1

Stored procedures are better, in my view, because they can have an independent security configuration from the underlying tables.

This means you can allow specific operations without out allowing writes/reads to specific tables. It also limits the damage that people can do if they discover a SQL injection exploit.