Can anyone point me to a GQL pattern that for: only the authenticated user can read the document?