I guess it is some sort of multi-tenant related question so I guess I am not the first one to ask..

Best thing is just to search here, on the supabase github discussions and in postgres in general for "multi tenant" So many different ways to go. But basically you would protect with orgId and have a table with member ids in an org and use that as part of RLS for getting your data. Also some are doing this with meta data in the user table identifying and org and using RLS on that.

Aye, I thought it would be something like that

Hard part is getting users into a an org from what I've seen. And protecting that process.

I guess you could add it to the jwt, and when doing auth against the DB you could extract it and use it in a rule/policy

Some are doing it that way... There was a very recent thread in discord on that.

You don't happen to know where exactly? 🙂

In supabase I would search with the search bar above. But it was within the past two weeks.

Coolio

Ha, I was in it... https://discord.com/channels/839993398554656828/941416507299213332

I’m going to try and create an example project around this as the question is asked quite often on here.