For example, the account supporting the product catalog application described above should have read-only access to the product table. This would prevent the application from passing along a query ...