I assigned a user Public, DB_DATAREADER, and DB_DENYDATAWRITER because I want him to view tables, but not write to any tables. Now he wants to be able to create views. How would I only add Create View rights for this user? Add him to the DB_DDladmin role?