Should only need execute rights on the stored procedure. There may be exceptions to that, but usuallly only if the tables in question on in another database.