Prisma

I'm experimenting with permission queries, and I have a question about how they are combined. Apparently, all permissions are considered 'allow' permissions, and combined like that. But I think permission queries are actually 'deny' permissions (it's a query that returns false if you are *not* allowed to see something). However, it doesn't work like that. Can anyone explain the reasoning?

<@U5P82S230> all permissions together are "allow? permissions if you put it like that

Okay, so there's no possibility to deny anything? Even though the permission query result implicates it?

<https://www.graph.cool/docs/reference/auth/authorization-iegoo0heez/#whitelist-permissions-for-modular-authorization>

there's not at the moment. Sounds like a great feature request though :slightly_smiling_face:

A there it is: "a permission cannot be nullified by other permissions"

Done. <https://github.com/graphcool/feature-requests/issues/241>