Firstly, let me start by saying that I haven't ever directly used SQL views. I don't know if they are an antiquated thing, or if they're the right way to do things in this arena. Which of the 2 methods do you prefer when considering security (don't show Acme's credit card number that's on file to a WidgetCorp user, etc), and are there other important considerations besides security?