Row-Level Security
ALTER POLICY
ALTER POLICY orders_owner_read ON orders USING (customer_id = current_setting('app.customer_id')::bigint); What this does
Changes who can see or modify rows under RLS. Test as every affected role before shipping; a policy typo can silently over- or under-expose data.