Row-level security (RLS) restricts table rows for individual users, but PostgreSQL superusers can bypass those policies indirectly through objects they own. section 8.4
The superuser-owned view leak
An unprivileged account subject to RLS selects from a view and unexpectedly receives rows. Because the view is owned by a superuser, PostgreSQL bypasses most permission checks, so the RLS policy is not applied through that view. Avoid unnecessary superuser ownership and investigate security_barrier views as a separate protection against view data leaks. section 8.4
CREATE DATABASE frogge_next OWNER postgres;
Use the database-ownership listing to recognize how assigning ownership to postgres can attach excessive privilege to database objects. section 8.4
