We recommend users leverage row-level security features built into modern RDBMS so the query results only return data for a given user.
You can read more on how to do that on Postgres here https://www.2ndquadrant.com/en/blog/application-users-vs-row...