David,

I like the approach, but be open to other options if it seems like that is what the company needs. For OLTP as far Im concerned it doesnt get any better than only using SP's for data access and only granting read only on the minimum tables needed to build dynamic queries.