The following screenshot is from an online learning platform I am using to learn SQL (more specifically PostgreSQL). I am concerned that I'm not understanding the following paragraph correctly.
It states that:
One shortcoming of SQL's approach to access control is that it only works on the granularity of whole tables (with the exception of the UPDATE privilege).
However, it appears I am entirely able to do the following to achieve the same result as creating a view and granting the SELECT privilege to the user for that view:
GRANT SELECT(studentId, uosCode) ON Enrolled TO SomeUser
Is the screenshot incorrect or have I misinterpreted something?