One may implement security by creating a view. This view then only contains the columns that you would like to show. If one adds a filter, one may also limit the rows that are shown. The user that is allowed to read a view, only sees the columns and rows that are included in the view.
The user can not see the underlying tables. If one looks at the privileges, one sees that the other tables are excluded from the porivileges granted:
