create database user and limited its access