I always wonder how centralised permissions works with listing endpoints. For accessing one resource that's fine, a cached call to any k/v store would work. Bu

I always wonder how centralised permissions works with listing endpoints. For accessing one resource that's fine, a cached call to any k/v store would work. But when you want to list every items for a resource in a table that contains millions of rows it starts to be more difficult. Without a JOIN you either need to do a costly WHERE IN or filter after the fetch that can results in scanning everything for nothing. Is there any blog post on that?