[taffer]

PostgREST performs authorization at transaction level, not at connection or session level, so a connection can be used by thousands of active users simultaneously.

[fauigerzigerk]

Oh that's very interesting indeed! I thought each open connection remained linked to exactly one authenticated user account until it is closed.