(Replying to own post)... thanks for the info about Postgres RLS/row-level security. I guess I should not be so leery... Looking at the last project I did, the

(Replying to own post)... thanks for the info about Postgres RLS/row-level security. I guess I should not be so leery... Looking at the last project I did, the app-level db-middleware basically consists of two things: (1) plumbing boilerplate; (2) enforces app-level auth rules, either by preventing unauthorized operations or adding required filters. It looks like I should probably look at RLE and can likely move anything app-specific out of the middleware... which might let it collapse to something entirely generic, and therefore entirely reusable, and quite possibly something I don't have to write myself.