I've previously seen this handled quite elegantly with SET ROLE/Authorization if I recall correctly, with a rollback at the end.