I think I'm going to investigate if the one-role-per-storedprocedure is good enough. In the end, it has the most fine-grained control. I can always create scripts that sets roles for...