具有有限数据库访问权限的SQL Server和C＃的安全实践

I have a project that I am working on that is essentially a self service database restoration / backup tool for client machines that run a database locally on their machines and contain sensitive information. Due to the nature of the business, and the amount of clients we have I simply cannot create stored procedures to use on the database with the program I am creating. I have a project that I am working on that is e