Typically, logged in users interact with an application that results in data being created, updated and deleted.
In almost every case, the application's code will need to ensure that the logged in user can only update/delete data created by them, not the data of other users.