#postgres

Authentication is the door, object-level authorization is the lock on every drawer, most systems lock the door with great care and leave the drawers open

The PSP is the one who withholds, you're left with the hard part