Thanks for your reply.

Wel, so a user who does't have permission to INSERT can still insert the records by executing procedures. right..?

Is there any way to check for the logged...