A DB designer can allow read only access ("views") do that we can SEE and USE the data outside of AC without being able to change it.
THAT is rub for me. Why NOT allow me to generate my own reports, while protecting the integrity of the data? (and the legality of the record)