changed sql user to readonly