I need some guidance on permissions. I'm creating a user management system. I want to group users together and only let people see a users contact info if they are in the same group. However I want everybody to be able to see all usernames. I can lock it down with permissions so that a user can't query all contact info. But ideally I'd like the query for all users to return every username and only return contact info for those in the users groups. Does anyone have a suggestion on how to do this?

@justinrich I have just the article. 😄 https://blog.graph.cool/graphql-directive-permissions-authorization-made-easy-54c076b5368e?source=linkShare-ed337aed377a-1520196799

And directives are built in to the resolvers in graphcool? Thanks for the article!

I apologize. I thought the question concerned Prisma. GraphCool has its own permission system.

I'm new to prisma, I noticed it's main purpose is to be a gql interface to a SQL database. Can I also use it to generate a database for my project?

Yes, it controls the database and runs its own migrations