> With this approach, you still have to update your rules if
> you want to support RETURNING on your views --- but if you
> don't update them, you don't have a security hole. Basically
> the standard setup for an updatable view would use
> "ON INSERT DO INSTEAD INSERT INTO ... RETURNING ..."
> where today you don't write any RETURNING.
I like that approach. And if the sections allow CASE WHEN
it should be possible to cover all use cases efficiently.
Andreas