In my experience very few have storage layer separation for customers data. It all logic in the application layer to control access. Do you mean stuff like row

In my experience very few have storage layer separation for customers data. It all logic in the application layer to control access. Do you mean stuff like row-level security in the database tables?