Client portals need database-level guardrails. Supabase row level security makes project, ticket, file, and invoice access explicit and auditable.