Limiting Client Access

["Jose Vega" <jvega@xxxxxxxxx>]

Hello,

One of our VPs wants us to give users client access
but our concern is the access they will have to the entire database.
Has anyone come across a situation where they have end-users needing
file transfer capability from client access yet needed to protect the rest of 
the live data.
 If so how did you handle limiting their access.
We don't use Object level security.

TIA,

Jose