Create a true Read Only User

It's currently impossible to create a true "read-only user". I can accomplish some Marketing Activity restrictions, but I'd like to be able to give access to view people in the database, and view smart list criteria without being able to modify the smart list criteria. Would be great if this functionality existed. 

Today on my "read-only" user, I have "Access database" checked off, and everything below it unchecked and it is giving full edit access to the database versus just view access and it's not desireable. Any solution or potential work-around would be much appreciated!