Yes, the idea is to lock the DB down. As I can see there are two approaches:

First - Application roles. But problem with them is that they do not allow...

OK, these are simple rules. I apologise, but I'm quite new in SQL Server (I worked with Progress RDBMS, and it hasn't stored procedures and even don't use SQL language).

But requirement...