RE: Restricting access to data only from certain views

This may be old fashioned but works:

A/ Set the table ("*PF") and all views(*LF) to owned by QSEC and access to
others as no access.
B/ Set the application programs to owned by QSEC and allow relevant users to
use the programs.
C/ Make a vies as a subset of the data and make this non-sensitive data
available to whoever.

Used this method years ago when certain data from the payroll master tables
(Name, department, phone, email...) should be available to everybody as a
phone directory application while all other payroll data was strictly locked
to the HR department. Also at the time we did not have SQL.

And by the way I totally agree with Birgitta Hauser and others that RCAC is
a wonderful solution as you can administer it all in one place and work with
groups and what have you. Just wanted to point out another method just in
case you (or others) for some reason do not have or is allowed to use SQL
for DB admin...