Prisma

Hi all, can anyone point me to an up-to-date guide on handling permissions with Prisma? it looks like there used to be a `permissions` root property that could go in `prisma.yml` but perhaps that’s no longer? my usecase right now isn’t that complex, I actually just want to make certain models read-only

HI Ryan,

Permissions are handled at the server layer.  There's Prisma authentication, but there's no permission control on Prisma.

do you know if there’s any way to tell Prisma that I don’t want mutations on certain models? or is it kind of all-or-nothing?

At Prisma level, it is all or nothing! but at the server level this can be managed easily, btw did you check out prisma-nexus yet? <https://www.prisma.io/blog/using-graphql-nexus-with-a-database-pmyl3660ncst/>

IMO it is the easiest way to implement the masking that you are referring to.