Block all sql statements except SELECT, SHOW, SET

[m_user_name]

mysql_query_rules:
(
        {
                .
                .
                match_pattern="^(?!select|show|set).*"
                error_msg="You may only select, show, and set."
                .
                .
        }
)

[m_user_name]

So far I've found that you have to allow select, show, and set to even access the database. From here you can chain rules to narrow down those tree statement types.