http://wiki.lessthandot.com/index.php/Grant_Execute_Permissions_For_All_Stored_Procedures_To_A_User

–Grab all the procedures for the current DB
SELECT IDENTITY(INT,1,1) AS ID,
SPECIFIC_NAME
INTO #Procedurelist
FROM INFORMATION_SCHEMA.ROUTINES –Only Procs
WHERE OBJECTPROPERTY(OBJECT_ID(SPECIFIC_NAME),’IsMSShipped’) =0
AND ROUTINE_TYPE=’PROCEDURE’
ORDER BY SPECIFIC_NAME

DECLARE
@Loopid INT,
@MaxId INT,
@UserName VARCHAR(50)

–This is the user that will get the execute permissions
SELECT @UserName = ‘SomeUser’

–Grab start and end values for the loop
SELECT @Loopid = 1,
@MaxId = MAX(ID)
FROM #Procedurelist

DECLARE
@SQL VARCHAR(500),
@ProcName VARCHAR(400)

–This is where the loop starts
WHILE @Loopid <= @MaxId BEGIN

–grab the procedure name
SELECT @ProcName = SPECIFIC_NAME
FROM #Procedurelist
WHERE ID = @Loopid

–construct the statement
SELECT @SQL = ‘GRANT EXECUTE ON ‘ + @ProcName + ‘ TO ‘ + @UserName
PRINT (@SQL) –change PRINT to EXECUTE if you want it to run automatically

–increment counter
SET @Loopid = @Loopid + 1
END

–clean up
DROP TABLE #Procedurelist

This would work if you’re looking to do it for all stored procedures.

Declare @schema_owner varchar(20);
Set @schema_owner = ‘dbo’;

Select [name] As ’storedProcedure’
, ‘Grant Execute On ‘ + @schema_owner + ‘.’ + [name]
+ ‘ To [insertDatabaseRoleHere];’ As ’sqlCode’
From sys.objects With (NoLock)
Where [name] Not In (
Select o.name
From sys.database_permissions p With (NoLock)
Inner Join sys.objects o With (NoLock)
On p.major_id = o.object_id
Inner Join sys.database_principals u With (NoLock)
On u.principal_id = p.grantee_principal_id
Where u.name = ‘[insertDatabaseRoleHere]‘
)
And [type] = ‘P’;

There’s a couple of differences between our scripts. Your script is used to set up a brand new user, and mine is to check for missing permissions for an existing database role. Also, you automatically execute, and mine you have to copy/paste/execute. But overall, pretty much the same thing, just different ways to get there.

(1) escape _ (otherwise it is treated as “any single character”)
(2) store the whole pattern in the string (that way if you move this to a procedure you don’t have to change the procedure to support LIKE ‘%[_]foo’ etc.)
(3) QUOTENAME() object names and include schema prefix in output

SET @sproc_name_pattern = N’sproc[_]%’;

SELECT @sql = @sql N’GRANT EXECUTE ON ‘
+ QUOTENAME(OBJECT_SCHEMA_NAME([object_id])) + ‘.’
+ QUOTENAME([name])
+ ‘ TO ‘
+ QUOTENAME(@user_name)
+ ‘;’
+ @newline + @newline
FROM sys.procedures
WHERE [name] LIKE @sproc_name_pattern;