you could create a procedure and give them execute on that procedure