Take a look at my migrations and you will see I created a is_admin function in the database and use RLS to manage everything https://github.com/silentworks/waiting-list/tree/main/migrations