> Maybe you're referring to the underlying concept rather than the implementation, but wasn't row-level security added to Postgres in 2016? Yes you are correct

> Maybe you're referring to the underlying concept rather than the implementation, but wasn't row-level security added to Postgres in 2016? Yes you are correct my statement was too vague, I was referring to Postgres' role based security in general at that point. RLS specifically was added in 9.5. Before that permission checking was table/column based, so you could still protect data on a per-role basis, just not as fine a grain. Another subtle difference is that RLS hides rows you can't see, where as a REVOKE on a table or column would cause an error if you tried to access it. In either case unauthorized users cannot see protected data.