I want to be able to give read only access to my SQL Server 2008 database server. In particular two databases one called "live" and one called "stage".
Essentially the guys who receive this username and password should be able to select from any of the tables, but not perform any update, delete or inserts. Of course they shouldn't be able to perform DDL operations. I could probably get away with banning them from running stored procs if I had to.