Thanks for the constructive feedback!

So far it looks like the application roles will be the way to go to achieve something like the solution we have in place for Sybase...