some additional bits: offset-based pagination is really difficult to maintain when you have an external source of authorization because your DB can't join against SpiceDB (or any external service, really). it generally works better with cursor-based pagination. sorting and filtering should still work roughly the same, though the question of whether the set of things that a user can see is larger than a typical filtered set plays into which way you'll end up filtering your results (pre- or post-)