You just need to pass a parameter to your stored procedure. For example:
ALTER PROCEDURE [dbo].[statuschange]
(
@department_id INT
)
AS
SELECT di.DocID...
WHERE department_id = @department_id
Or, if it is based on user id you can pass in the user id and then do your logic to determine what they have access to.