Securing Fields
Learn how to enforce authorization on particular fields.
We'll cover the following...
Since we now have a way to get the current user, we need to enforce authorization on particular fields to check the context. Knowing the current user also gives us the ability to retrieve associated records in our resolvers and return user-specific information.
Inline authorization
Before we let customers anywhere near this API, we need ...