How to add API authentication in addtion to API key?

[j2l]

Hello,
Your project is great! A lot of potential!

Reading https://support.getgrist.com/api/#tag/Attachments I understand that the API key is enough to authenticate, then we add user to org, workspace, document. But is there a way to add additional rules for record owner (like supabase)?
Like a public table where everyone can read but only record owner can edit/delete his row.
Or is it in your future plans? If so, will it be open source?

[j2l]

Aaah, sorry, it's at https://support.getgrist.com/access-rules/#_top