Probably want to create a view so that they are limited to the tables you specify...then you could create a new database roll add the user to the role and select the appropriate tables/views/objects what have you that your user needs select permission for. Make sense?