gstv_m wrote:

> So, by the moment, the best thing I can do is what Alexandre
> suggested but I still have the following problems:
>
> 1. The user will be allowed to create a table. Is there a way to
> avoid this?
>

I really don't know what happens if a user opens a read-only transaction
and try to create a table... Maybe it works give it a try.

> 2. eMeL said that executing a SELECT with a SP, the read only user
> can modify the database. Is this true even if I don't grant EXECUTE
> to this user?
>

I think he is saying about your SP has code that update the database and
works as a selectable SP. If you code your SP just to select from a
table, any user that has no direct access to the table, but have
privileges to execute that SP, will not change any data.

> Any other suggestion of creating a read only user another way?
>

nope

> Gustavo
>

see you !

--
Alexandre Benson Smith
Development
THOR Software e Comercial Ltda
Santo Andre - Sao Paulo - Brazil
www.thorsoftware.com.br