Avoid givin uses the right to access directly the database. Instead, make a web page or service to do that.
Remember to crypt in some way the contents, or people will be able change them.