CFQUERY and CFSTOREPROC

I notice that there are CFQUERY and CFSTOREPROC tag for CF.

I wonder that we need run the stored procedure when users need access the data result for security reason, we do not want to user access the tables.

if this is the case, we have to use CFSTROPROC all the time and never use CFQUERY.

Please let me know if I am wrong,

Your information is great appreciated,

iccsi