I hope you will only be exposing that stored procedure as a web service to internal (LAN) consumers...