Hey everyone, I am trying to understand how to best make a graphql permission query that would let me solve this situation: I have an Office that has multiple administrators and employees. Employees track time but when they query

{ timelog: {id} }

they should only see their own, if they are an admin (done by a many to many association on Office <> Users) they should see all timelogs, not just the current auth'd user... How could I go about this?