> Use Postgres as my permissions layer?
It's actually so good I regret not having done it sooner. We migrated all our APIs into PostgREST [1] and it reduced our development/testing/deployment time by an insane amount, decreased the number of bugs automatically by removing 1 extra layer and made all our requests faster without having to optimize anything.
I'm genuinely surprised it's not more popular. It would probably benefit like 99% of the small/medium size companies.
Writing SQL is kinda fun too.