I have some users in my database. They are member of db_datareader. They now also need to have execute permissions on stored procedures. I was just wondering what would happen if one of the stored procedures issue DDL? Would they be able to make schema changes to tables, drop etc. through that stored procedure?