By default YES the RLS applies to rpc. If you use "security definer" in the PostGres function then they would be bypassed. You mention RLS on a view... I think the tables used by the view would still enforce their RLS, but I don't use views so not positive.