Does the readonly login have access to the underlying database? The fact it works with sa leads me to beleieve that the user needs some further permission at db level to execute the query.