IMO both Postgresql RBAC and Graphile make a big difference. The work that has been done over Graphile has been tremendous, very very polished and well documented. I have been using it on https://stack.lol with great results.