hi all, can supabase do authorization on resource that doesn't exist on its database? spefically I'm trying to use supabase to authenticate my users, then they will have access to an api server to create resources on a separated backend, later on I want my user to have different roles so that they can only access the resources that they created, does supabase have any authorization feature that can achieve this? Thanks in advance