We are developing an application which will connect to the PostgreSQL 9.5 at backend.
We do not want any DB role/user including superuser to access the table data from the backend, only if the user is logging in from the application can see the data.
To achieve this we have created policies and enable RLS on the tables. By enabling the RLS and creating policies we are able to restrict all the DB user/role including table owner of the table but not able to restrict superuser.
