You say you're a new programmer. So I strongly advise you to do what your boss says. Not because he's your boss and you're a newbie but because:
- "I'm not really sure what I'm talking about so I asked some random strangers on StackOverflow and they said ... " is not a strong argument.
- Putting business rules in the database (stored procedures) or in the application is a long-running religious war to which there is no definitive answer, regardless of what anybody says.
Now you're right to be concerned about passing multiple detail records in a string. That's lame. It ought to be an array of some description. However, the correct approach in this situation is to work with your boss to improve the stored procedure's interface.
Finally, the bottom line is this: when we're working in a team building software consistency is a great virtue - even if it means using a sub-optimal approach.