column level privileges are not reflected in swagger UI

[litriv]

would be nice to have the OpenAPI spec reflect column level privileges. i'll take this on once #970 had been merged

[ruslantalpa]

#970 is merged now :)

[FGRibreau]

(related)

Indeed some columns are displayed in the swagger/open-api spec, while they should not be because anonymous is not authorized to view them.

E.g. in:

grant select ("theme_id", "user_id", "title", "description", "createdAt", "updatedAt", "parameters") on api.themes to "anonymous";

api.themes view has other columns like "status", and "status" is present inside the generated swagger, we might not want this as it leaks information