maybe it is time to overhaul the security concept.
I could see how I could revoke permissions from, say, all users that aren't superusers to INSERT or UPDATE certain views. However, if possible it would be nice to get an error message about the VIEW not being updatable, rather than a user access error, which could be misleading.
When I try to insert into a non-updatable VIEWs, I get this message:
ERROR: cannot insert into view "test_view"
DETAIL: Views containing GROUP BY are not automatically updatable. HINT: To enable inserting into the view, provide an INSTEAD OF INSERT trigger or an unconditional ON INSERT DO INSTEAD rule.
It would be great to see something like this when trying to insert into a simple VIEW that I had made non-updatable:
ERROR: cannot insert into view "test_view2"
DETAIL: This view has manually been made non-updatable.
Something like CREATE READ ONLY VIEW test_view2 AS SELECT ....