Is there a way to keep users from creating new objects in a database
while letting them access existing objects in the same database?
It doesn't look like there is a clean (e.g. with GRANT) way to do this. I
tried looking to see if there was a sneaky way to block update access to some
of the system tables, but that doesn't seem to be doable either.