Security Handling

What experiences or methods have people had in handling security in a database when the business dicates the use of group accounts via some client apps (ie, Powerbuilder)? Is it reasonable to require the use of stored procedures for all table updates so the group account only has access to the stored procs and not the actual tables? That would at least ensure that the data will follow the business logic...

Any thoughts..

Thanks,
Derek

--
Derek A. Hackbardt
System Administrator, Cargill Fertilizer Inc.
(813) 671-6291
Derek_Hackbardt_at_cargill.com