3 Replies
Click the button for more. This has probably been in your security advisory for as long as you have had it.
Basically if you don't know how to make sure a security definer view is safe then you should implement it as an invoker view. BUT it will then obey RLS on all tables it uses.
All I see is this
Are you sure you clicked on the view versus a table with RLS disabled?
There are two different warnings (at least) depending on if a view or a table.