make queries read only on the database