The problem with these invocations is that they're complicated in normal applications, which may have 100s of statements. Making sure roles are well-defined is often a daunting task.

Enter kwebapp(1)…

kwebapp(1) is a code generator for ksql(3) applications. It uses a configuration file to define the data model and access routines. It also has full RBAC support… as well as role auditing!