This clause specifies optional parameters for a view; currently, the
- only suppored parameter name is security_barrier,
+ only supported parameter name is security_barrier,
which should be enabled when a view is intended to provide row-level
security. See for full details.
When it is necessary for a view to provide row-level security, the
security_barrier attribute should be applied to
the view. This prevents maliciously-chosen functions and operators from
- being invoked on rows until afterthe view has done its work. For
+ being invoked on rows until after the view has done its work. For
example, if the view shown above had been created like this, it would
be secure:
It is important to understand that even a view created with the
security_barrier option is intended to be secure only
- in the limited sense that the contents of the invisible tuples will not
+ in the limited sense that the contents of the invisible tuples will not be
passed to possibly-insecure functions. The user may well have other means
of making inferences about the unseen data; for example, they can see the
query plan using EXPLAIN, or measure the runtime of