removed db_datareader permissions

granted select to viewer on all but a few tables and views
created special views for viewer that limited location data to all but
the last 30 days