Simulating field-level permissions via stored SQL functions?

I think that the subject line explains what I am trying to do.  How can I
create a stored function (in SQL, if that matters) that a user can call to
update data in a table to which they normally only have read access?

Thanks,
Neal Lindsay