How would you achieve something like ACL in Prisma? If you expose the Prisma side type, it will result in the relations exposed as well, which ends up allowing traversing the whole database.

Not sure if you should be exposing the Prisma API publicly. It’s pretty much exposing your database.

I'm just exposing the types (by import).

@Tatsuyuki Ishi If I understand you correctly, you would have to do it yourself using something like

graphql-shield