Consider authentication
I think the best way to do this is to add an endpoint to the Django app that allows users to send SQL queries to the DB.
This endpoint will require authentication with a token which we shall keep on keeper/ansible vault.
The endpoint will use the read-only postgres accounts in order to query the db.
Consider scanning the incoming query for write commands.