In case someone else has the same issue, the solution is pretty simple actually: when setting up the UPDATE policy for authenticated users, you need to make sure that the USING expression evaluates to true as well - then everything works as expected!
2 Likes