create procedure sp_password
    @old sysname = NULL,         -- the old (current) password
 
    @new sysname,                -- the new password
 
    @loginame sysname = NULL     -- user to change password on
 
as
     -- SETUP RUNTIME OPTIONS / DECLARE VARIABLES --
 
	set nocount on
    declare @self int
    select @self = CASE WHEN @loginame is null THEN  1  ELSE  2  END

     -- RESOLVE LOGIN NAME
 
    if @loginame is null
        select @loginame = suser_sname()

     -- CHECK PERMISSIONS (SecurityAdmin per Richard Waymire) --
 
	IF (not is_srvrolemember('securityadmin') =  1 )
        AND not @self =  1 
	begin
	   dbcc auditevent ( 107 , @self,  0 , @loginame, NULL, NULL, NULL)
	   raiserror( 15210 ,- 1 ,- 1 )
	   return ( 1 )
	end
	ELSE
	begin
	   dbcc auditevent ( 107 , @self,  1 , @loginame, NULL, NULL, NULL)
	end
...


	 -- IF non-SYSADMIN ATTEMPTING CHANGE TO SYSADMIN, REQUIRE PASSWORD (218078) --
 
	if (@self <>  1  AND is_srvrolemember('sysadmin') =  0  AND exists
			(SELECT * FROM master.dbo.syslogins WHERE loginname = @loginame and isntname =  0 
				AND sysadmin =  1 ) )
		SELECT @self =  1 

...