small question

Suppose we have table A and table B. When action is performed on table A
(for example INSERT), some action (for example UPDATE) through the trigger
is done on table B.

If user had GRANT permission on both tables - everything is good. But in
that way user can get access to table B directly.

If I need to limit user's access to table B only through the trigger, how to
do this?