[ianpurton]

The authz solutions I've seen so far are quite good at does a user have permission to do x.

But not so good at the database side of things. I.e. give me the data this user is allowed to see. Which is harder in my opinion.

I've been using postgres row level security to handle this.