Zkusili jste: revoke exec on sp from user2 as user1 https://technet.microsoft.com/en-us/ library/ms187719.aspx