In the current implementation, authN of physical tables is checked to determine if the user has access to the logical table. Also the error message specifies the logical table name. There are open questions wrt to the current implementation:
- Should authN be on the logical table and NOT on the constituents ?
- Should the error message specify the physical table name ? Is this a leak ?