How can someone update a row they cannot see?
How do you abuse select?
Yes you can grant insert and update without select. I am of the opinion that you control access using stored procedures and views.
Jack Corbett
Consultant - Straight Path Solutions
Check out these links on how to get faster and more accurate answers:
Forum Etiquette: How to post data/code on a forum to get the best help
Need an Answer? Actually, No ... You Need a Question