Returns a report that has information about user permissions for an object, or statement permissions, in the current database.
To find stored procedures that “username” can access:
exec sp_helprotect @username = 'username'
To see all objects in database and who has access:
exec sp_helprotect
For complete capabilities see http://msdn.microsoft.com/en-us/library/ms190310.aspx