> This is sane and good design. The db auth layer is for db management, not frontend auth (are you seriously advocating this?). The auth layer of PostgreSQL is

> This is sane and good design. The db auth layer is for db management, not frontend auth (are you seriously advocating this?). The auth layer of PostgreSQL is very advanced, up to row level security if you need that. [1] It was never intended to be "just for administration", quite the contrary! Moreover, some applications rely exclusively on a central PostgreSQL service rather than a central web service, such as "Artikel23" which is (was?) a CRM whose user management, encryption and security stuff is 100% handled by PostgreSQL. [1] https://www.postgresql.org/docs/current/static/ddl-rowsecurity.html https://www.postgresql.org/docs/current/static/ddl-rowsecuri...