Row-level security (RLS)

With RLS, the database itself refuses queries that reach outside a user's permitted rows — access control lives at the data layer instead of depending on every application code path remembering to filter.

It's the difference between "the app usually checks" and "the database always refuses": for multi-tenant systems holding galleries' inventories and collector lists, the latter is the boundary worth having.