Don't grant user access directly to tables within the

application.

Instead grant the ability to access the procedures that

access the tables.

When procedure executed it will execute the privilege of

procedures owner. Users cannot access tables except via the

procedure.