for create operations, outside of a custom mutation function, is there any way to enforce certain field values (e.g., the creating user_id must be set on X field and can't be forged?)