as far as I understand in self-made graphql backend I can restrict this with fields for mutation but how to do this in graph.cool?