From dc9a2858252cc94dc04007cd93edbbfec0951951 Mon Sep 17 00:00:00 2001
From: Kyle Johnson <1007162+kyle-johnson@users.noreply.github.com>
Date: Sun, 23 Sep 2018 03:08:24 -0700
Subject: [PATCH] Note Postgres' (current) RLS limitations for views

---
 api.rst | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/api.rst b/api.rst
index dac2e18b5..d0acc499f 100644
--- a/api.rst
+++ b/api.rst
@@ -98,6 +98,10 @@ The view will provide a new endpoint:
 
   GET /fresh_stories HTTP/1.1
 
+.. important::
+
+  Views bypass all row-level security features and are invoked as the role which created the view, much like stored procedures with the "SECURITY DEFINER" option.
+
 .. _fts:
 
 Full-Text Search