Yep, if the products table had columns that were only accessible to some users, SELECT * would throw an error in those cases.

In my case I use Postgraphile. If you select a column that you can't access, you get an error - I don't see a problem there.

PostgREST doesn't support column selection?

It does, but if you `SELECT *` and you don't have access to all the columns you will get an error. You need to select columns that you have access to and if you select all columns but don't have access to all columns you get an error. I think it's the same in Postgraphile, no?