Rather than allowing anyone and everyone direct access to your database, why not set up a simple web service (API) which users can tie in to. That way, you can handle all the permissions, security, authorisation, authentication, etc. Plus you'll be cool for opening up an API.