Another question. With

type User @model { ... }

we get allUsers built-in method. Now, when I’m trying to restrict the access to read on this type I made

permissions: 
  - operation: User.read
    authenticated: true
    query: url

and in linked file for query field

query ($user_id: ID!) {
  SomeUserExists(filter: {id: $user_id})
}

but when any user is logged in I have access to all of the users. How can I rewrite it to achieve that logged in user can see only his data even if quering allUsers?

You need to add a condition with

id: $node_id

Ok, I’ll give it a try in a sec

Did you add

$node_id

as query parameter as well?

Yes. Now the code looks like

query ($user_id: ID!, $node_id: ID!) {
    SomeUserExists(
        filter: { 
            AND: [{
                id: $user_id
            }, {
                id: $node_id
            }]
        }
    )
}

looks good

I can log in and check whether user is logged in

Then the query should work... If not, I don't know why not...

Ok, thanks for help anyway 🙂