We use Postgres Row Level Security to implement the authorization. You can create your own policies from the dashboard too. You can read more about it here: https://supabase.io/blog/2020/08/05/supabase-auth