I've been thinking about the problem and the more I think about it, I tried many different alternatives, it's best to have plain SQL being sent for queries. Th

I've been thinking about the problem and the more I think about it, I tried many different alternatives, it's best to have plain SQL being sent for queries. The problem there is whi has the right to run which queries? So the real problem is authorization.