Limited rights for a user

Hi,

I grant to one user only the SELECT action on my tables.
But I'd like he could update some data without granting him the UPDATE
right...
Is it possible to put the UPDATE in a function and then the user can
UPDATE the data by usinf this function ?

Or I must grant him the UPDATE right ? (which is a big security limit...)

Thanx.

Guillaume.