I am working on Security. There are so many ways to do things in SQL. I was looking for some advice from someone who is experienced in this area.

I have a Stored Proc that is working perfectly. This Stored Proc is linked to a SSRS Report. When a user logs in, I need to check the following:

Is userid in the Table1?
If yes, don't look for that userid, again - bring back all columns
If no, look in Table2

Is userid in the Table2?
If yes, don't look for that userid, again - bring back all columns
If no, look in Table3

Is userid in the Table3?
If yes, don't look for that userid, again - bring back all columns
If no, stop looking