News for hackers. Stuff that matters.

LawJolla

I'm also interested in #1!
Huge fan and user of Graphcool the BaaS! My question concerns permissions.

I thought Graphcool did a phenomenal job of permission/authorization. The tutorials seem to kick authentication to the application layer. That seems appropriate.

I think one of GraphQL's pain points is lack of a permissions pattern. It's typically hand rolled at the field / resolver level, leaving a lot of messy code. Will permissions be a part of Prisma and, if so, is there a road map for how granular they can be?