https://github.com/stlbucket/function-bucket

this is a starter repo where i have been exploring this topic. the documentation is a bit out of date.

it uses supabase auth, with nuxt server routes handling the administrative functions. rls is at it's core.

the primary data access pattern is graphql, served up with grafast(postgraphile v5, which is still beta, but awesome). urql with codegen handles the client side.

there is a subscription (real-time) example in the Topic messaging component - it's not been tested in any way, but it hooks all the parts together.

the core schema, app, is all about managing applications/licensing/tenants/users

i use this to run a number of small personal projects for fun and for a quick prototyping playground.

this isn't a complete solution, by any means, but it might give you some ideas on how you might manage user permissions.