Can RLS or CLS be treated as a SELECT trigger, or is it too coarse for that?
I agree with the suggestion to use a view if possible. I know it might not be viable if you use an object-relational model abstraction layer implementation that provides heavy caching.