Do fromEvent() & .api() circumvent permission queries?

prisma-archive / graphcool-lib

A convenient tool to use in Graphcool functions to make requests against your Graphcool API

33 stars 6 forks source link

Open parthradia opened 6 years ago

parthradia commented 6 years ago

I have all permissions turned off, but when using fromEvent() & .api() my resolvers are able to circumvent such restrictions.