This section is at https://rollingedition.com/data-governance-as-code/enforcing-policies-on-queries#test-who-sees-what.