Prisma

Hi, me again Lol, So I have this query to update a record something like this, I want to ensure that only the user who created it, can authorize the edit.

```
    const {userId} = context  
    const updatedSavedLink = await context.prisma.savedLink.update({
        where: {
            id: args.savedLinkId,
           // adding userId: userId throws error 
        },
        data: {
            note: args.note ? args.note.trim() : null
        }
    })```

This is how the schema looks like:
```model SavedLink {
  id        String   @id @default(uuid())
  createdAt DateTime @default(now())
  link      Link     @relation(fields: [linkId], references: [id])
  linkId    String
  user      User     @relation(fields: [userId], references: [id])
  userId    String
  note      String?

  @@unique([id, userId])
}```

Are you using some sort of authorisation middleware like <https://github.com/maticzav/graphql-shield|graphql-shield>?

like, is it better to check that on the graphql layer, than adding an extra where condition in the query?

Better to check on the shield layer where you can easily add a rule like `isPostAuthor`