changes to use check_enable_rls() for RLS checks