PostgREST doesn't expose PostgreSQL full SQL capabilities. The clients can't do at will JOINs, DISTINCT, GROUP BYs, CALL arbitrary functions, etc, through its

PostgREST doesn't expose PostgreSQL full SQL capabilities. The clients can't do at will JOINs, DISTINCT, GROUP BYs, CALL arbitrary functions, etc, through its REST interface. It only exposes fast/safe operations and a single isolated schema of your choosing. In a way you could think of PostgREST as a sandbox on top of PostgreSQL. DDoS protection has been thought since PostgREST inception and it has influenced its design. You can see more details of PostgREST design in this article: https://medium.freecodecamp.org/stop-calling-postgrest-magic-8f3e1d5e5dd1 https://medium.freecodecamp.org/stop-calling-postgrest-magic...