Agree with all points here. An upside to using db to handle data permissions is the data has the same protections if you are accessing with direct SQL or using

Agree with all points here. An upside to using db to handle data permissions is the data has the same protections if you are accessing with direct SQL or using an app. Also, those permissions would persist with the data in restored backups. I’m not advocating this and think for OLTP, building RBAC in the app layer is almost always a better idea, but these would be some benefits.