Row level security sounds reasonable. Otherwise I don’t see how full DB access can be safe.