allow setting permissions to restrict access to data but allow aggregate queries

hasura / graphql-engine

Blazing fast, instant realtime GraphQL APIs on your DB with fine grained access control, also trigger webhooks on database events.

https://hasura.io

Apache License 2.0

31.06k stars 2.76k forks source link

allow setting permissions to restrict access to data but allow aggregate queries #2288

Open wawhal opened 5 years ago

wawhal commented 5 years ago

Thoughts @0x777 @rikinsk @coco98?

Can be achieved with views. But it would be very comfortable if we could set permissions such that one can make "only" aggregate queries. Makes the implementation of article_downvotes, article_upvotes etc joyful.

rikinsk-zz commented 5 years ago

I think this makes sense