Am Wed, Mar 26, 2025 at 06:24:14PM +0100 schrieb Karsten Hilbert:
> > Works fine if you don't mess with the view's security_invoker
> > status.
>
> I know but doing so was kind of the point.
>
> The views are created by a "database owner" role having
> access to all tables. Therefore, roles using the views would
> normally gain access to tables they are otherwise not
> allowed to read.
Or rather, to certain *columns* of tables...
Karsten
--
GPG 40BE 5B0E C98E 1713 AFA6 5BC0 3BEA AC80 7D4F C89B
