John,

all our C# applications use stored procedures to change data; it's the easiest way to set up the security so that users can do only what you want them to do. You can process datasets using table parameters.

Chris