CREATE DATABASE DatabaseA;
GO

CREATE TABLE TableA ( ColumnA VARCHAR(255) )
GO


INSERT INTO TableA VALUES ('ABC');
INSERT INTO TableA VALUES ('DEF');
INSERT INTO TableA VALUES ('GHI');
INSERT INTO TableA VALUES ('JKL');

GRANT SELECT ON OBJECT::dbo.TableA TO [Test\TestUser];
GO

CREATE PROCEDURE spA
        @paramA VARCHAR(255)
AS
BEGIN
        EXEC('SELECT * FROM tableA WHERE ColumnA = ''' + @paramA + '''');
END
GO

GRANT EXECUTE ON dbo.spA TO [Test\TestUser];

EXEC dbo.spA 'ABC'';DROP TABLE TableA;SELECT ''';