got it;

if a normal user calls that procedure, it would fail, because the normal user doesn't have permission to create database.

you would need to use EXECUTE AS on the procedure, if normal users are going to call it.

--the EXECUTE AS must be a user in the database...not a login

CREATE procedure pr_CallBoostedSecurityProcess

WITH EXECUTE AS 'superman'

AS

BEGIN

'do priviledges stuff

--dbcc freeproccache

CREATE DATABASE MyDatabase

END