In this sense there is no such thing as a read only user or indeed read only table (because of this). disallow access is the best option.I liked Richard's post but wrote the comment because the major point i wanted to make is WHY, OK, there are plenty of potential how is and Oracle are even helping in 11g but WHY, Why does anyone need read-only access?