Jeg ved ikke, hvor anstændigt det er, men det virker for mig. Jeg fandt løsningen ved at oprette en visning, hvor er id'et for den aktuelle_brugers afdeling og derefter kontrollere, om det matcher:
CREATE VIEW curr_department AS
(SELECT department_id as id FROM employee WHERE id =
(SELECT employee_id FROM account WHERE login = current_user)
);
CREATE POLICY locale_policy ON employee
TO justuser, operator
USING (department_id =
(SELECT id FROM curr_department)
);