e.g. if a user has a JWT claim: role: { workspace_reader: [id1, id2, ...] } for document workspaces, Typesense could be set up to automatically add a filter on the search where the document_workspace_id is one of the listed IDs