-
Notifications
You must be signed in to change notification settings - Fork 161
Closed
Labels
Description
Hi,
I have the following problem: For validating permission / access to resources, we need to always fetch an owner id like userId on the requested instance. This should happen without the need to explicitly require the field in a query.
So for example I'd like to be able to say { orders(userId: "12375") { id } }, which should set findOptions.attributes to ['userId', 'id']. This would allow me to a) not overfetch SQL columns and b) to not force the expose unwanted information in the response.