Allow access to enter data through forms, but not full database access
Use stored procedures, which can validate input before issuing the SQL commands. The user can be given rights to the stored procedure without any other access.