I ve found examples where permissions allow auth users to cr

Question

I ve found examples where permissions allow auth users to create but anyone who is authorised can read the document

taikn · Answer

you need to add a line to your `graphcool yml` like this ``` permissions operation User read authenticated true ``` where `User` is the name of the type you want to set read permissions to

panzupa · Answer

so you want authorized or authenticated user to read the document

rem · Answer

I want the user who created the document to be the only one who can read the document

rem · Answer

i e `authenticated true` allows ALL authed users to read

rem · Answer

which is too open for my needs

panzupa · Answer

authentication means that you know who that person is

panzupa · Answer

authorization means you decide what she he can do

panzupa · Answer

two different conecpts

panzupa · Answer

now you need to create permission query which is basiacally a filter

panzupa · Answer

```query $node id ID $user id ID SomeDocumentExists filter id $node id createdBy id $user id ```

panzupa · Answer

more or less like that

panzupa · Answer

assuming you re using builtin system type `User`

panzupa · Answer

field `createdBy` is of type `User` query above

angly · Answer

Isn t this just client side restrictions

panzupa · Answer

this is executed inside GC so it s server side