As part of implementing a security model for our application, we've enforced schema security such that our application can only call stored procs, views, and UDFs. This helps prevent sql injection ...

You don't have to give up using dynamic SQL just because you're using Entity Framework. The Entity Framework SqlQuery method will give you back the flexibility of dynamic SQL and still let you work ...