Understanding developer-related features
Administration-related features are not everything. PostgreSQL 15 also provides some developer-related features that are useful to build even more powerful applications. In this section, you will learn which ones are available.
Security invoker views
In PostgreSQL, a view is a separate security context. It might happen that somebody is allowed to access a view but not the underlying table. Why does this matter? Consider the following scenario:
- Joe is allowed to see all sales
- Jane is only allowed to see total turnover by country
Jane will be granted rights on a view that sums up the data. She will be able to read that view without having the right to read the sales table directly.
However, in PostgreSQL, it is now possible to make PostgreSQL treat the view more like a preprocessor directive. By setting security_invoker, it will also check the underlying tables and not treat the view as a separate security context anymore...
