limit database privileges