Har du testat: revoke exec on sp from user2 as user1 http://technet.microsoft.com/en-us/ library/ms187719.aspx
