Authorize only through a Postgres Query