An application should execute one approved procedure but must not administer the database. Which permission design fits?

1. Grant every server role
2. Make the application db_owner by default
3. Grant the required object-level execution authority with the appropriate procedure security design
4. Hide the database name and omit permissions