the default permissions for User seems too permiss...
# prisma-whats-new
d
the default permissions for User seems too permissive ex: any user can run a mutation for another user