Dynamic SQL lets you create a query string based off of user input. SQL Server allows you to create dynamic SQL statements. The statements use a SQL string varchar data type, then you execute the ...
You can't use wildcards in statements like you want. The easiest way for you to do what you want is to just grant the user the db_datareader role and make sure they're not part of a group with the ...