Row-Level Security — Enforcing Access Control in the Database

Row-Level Security (RLS) lets you embed access control rules directly in PostgreSQL table definitions. Instead of relying on application code to add WHERE user_id = :current_user to every query, you define a policy once and the database enforces it for every query, every time, for every role it applies to.