You can't use wildcards in statements like you want. The easiest way for you to do what you want is to just grant the user the db_datareader role and make sure they're not part of a group with the ...

Well, if you happen to be using Sql Server you can do that sort of thing in T-Sql. In Oracle, you can also accomplish the same thing using pl/sql. Either way i'd do it in a stored ...