Discussion on: GraphQL RBAC without JWT Roles

[Jonathan Gamble]

Only think I would add, is that I would secure the entire schema first (so you don't have to mess with it later), and then add the one link through dql:

JSON DQL

{
  "dgraph.type": "Link",
  "Link.id": "link"
}

OR

DQL triples

_:new <dgraph.type> "Link"
_:new <Link.id> "link"

J

[verneleem]

Sure you could do that. I was just doing this more in a simplistic approach keeping it all in GraphQL and build upon precepts tutorial style.