Yes there would be a definite need for user/permission table - but I would be happy with the functionality and forcing me to control permission for now. I'm using PHP now and validate at login. I could easily restrict those without 'write' permissions to only 'readonly' queries and/or pages.
That is fine for controleld use via CGI/Perl/PHP etc but not for CUI users, of which I have many.
We currently have a web front end for fpSQL that allows users to enter variable data, run the query, display the results back in the browser and optionally load into Excel, an actual Excel spreadsheet, not fixed field lenght or CSV. Currently IT writes the query or stores user queries. I was hoping to extend this to a graphical "write a query" but would be loath to if the users had create/delete/modify capabilities.