A nice list but I'd also add row-level security (RLS): https://info.crunchydata.com/blog/a-postgresql-row-level-sec...

It's amazing how much effort we put into restricting access on the server, but ignore user roles on the data layer.

> It's amazing how much effort we put into restricting access on the server, but ignore user roles on the data layer.

That's one of the reasons PostgREST seems promising to me. http://postgrest.org

I've also been a happy user of Sandman: https://github.com/jeffknupp/sandman2