Comment by rattray

The solution to this should be to use the db's security/permissions model.

For example, with postgres: https://stackoverflow.com/questions/49261452/combining-row-l...