yup, that's what I meant by authorisation, keeping the roles and groups in pgsql up to date.