CREATE OR REPLACE VIEW v_employee_public AS
SELECT
  emp_id,
  first_name,
  last_name,
  job_title,
  dept_id,
  hire_date,
  status
  -- salary EXCLUDED for privacy
FROM employees
WHERE status = 'active';

-- Grant access without exposing raw table
GRANT SELECT ON v_employee_public TO readonly_user;