graphcool-lib icon indicating copy to clipboard operation
graphcool-lib copied to clipboard

Do fromEvent() & .api() circumvent permission queries?

Open parthradia opened this issue 7 years ago • 0 comments

I have all permissions turned off, but when using fromEvent() & .api() my resolvers are able to circumvent such restrictions.

parthradia avatar Jan 30 '18 00:01 parthradia