A view as a permission boundary

• A

  Grant SELECT on the whole table and simply ask that the reporting queries omit the salary column themselves

• B

  Move salary to a second table and grant SELECT on the first

• C

  Create a view selecting the four allowed columns, grant SELECT on the view, and grant nothing on the table

• D

  Encrypt the salary column and give the reporting team no key