User Roles - View Only for Smart Lists and Reports?

We are trying to create a User Role that allows for viewing of existing Smart Lists and Reports but not the ability to create or update an existing smart list or report. I don't see any way to do this. In order to see the "Database" tab, you have to select the "Access Database" permission. There doesn't seem to be a specific "Edit" or "Create" permission so once you select "Access Database" the user can create and edit smart lists. There is a specific permission for "Delete" so once they create the smart list, they can't delete it. Similar scenario exists for "Access Analytics".

Am I missing anything or is this just one of the limitations in the User Roles?

Thanks,

Sheila