I would say:-
1) You certainly don't need another database
2) The BE doesn't even need to be read-only
3) You can effectively control what the Client views, edits, or adds by use of Forms restricting which tables (and which fields within the table records) they can add or edit data
Hope this...