Hello hackers,
Currently views are not secure by default since they bypass RLS. PostgreSQL 15 introduced the `WITH (security_invoker = true)` option for this but it's easy to miss on every new view created.
It's also inconsistent with functions, which default to SECURITY INVOKER.
I propose adding an option: `CREATE DATABASE .. SECURITY_INVOKER_VIEWS <bool>` (false by default to maintain backwards compat), so a database will have newly created views as SECURITY INVOKER.
Let me know what you think.
Best regards,
Steve Chavez
