Firstly you will need to give the connect role to all of your users. This role allows them to authenticate. Without it, they will be unable to access any data.

After this, you will assign user-level roles to your users based on need. For testing and development you will also need to assign superuser roles so that you have “control” users whose access is not restricted. If you find something that is not working as you expect, try it using one of these control users. If it works for them, then you have an access control problem. If not, the bug lies elsewhere.