Strategy 3
The user does not query the database. The user queries an authorized view of the database.