I was tired of authorization logic scattered everywhere… so I tried to build my own solution: a po

Define policy-driven authorization once and compile it into secure SQL.