This is an example of a fairly sophisticated application. There is a master table called favorite_colors that contains people's usernames and their favorite colors. Anyone can SELECT from this table, so anyone can see everyone else's favorite color. There is a view called my_color which gives the row of favorite_colors which the current user is allowed to change. Anyone can INSERT, SELECT, UPDATE this view, thus allowing people to change ONLY their own favorite color, unless they have additional access on the master favorite_colors table.
Here are people's favorite colors:
[(html-repeat (brl-sql "select lower(uname) as luser, color from brlewis.favorite_colors order by uname"))]