How to restrict user using ArcMap or ArcCatalog from exporting SDE Layer using Database priviliages
There is no way to prevent the user from exporting the data out, if they even have only View (SELECT) privilege on the data.
As long as they are able to preview the data\open it in ArcMap...they can export it out too.
Suggestion: Add Tags to your questions to make sure you get better response.
sde administrationenterprise gis sdesdegeodatabasemanaging_data
Phew... to my best knowledge, that is not possible. As long as you grant read access (SELECT oeration), the user can read everything.
The only way to do something similar to what you describe would be to publish the layer as a service. Depending on what type of service you publish and what type of capabilities you enable, users will not be able to work with it as with a standard feature class. At the same time though, this may be a problem for how you do want your users to use the layer in ArcMap.
Any other idea?
Retrieving data ...