DEV Community

Discussion on: GraphQL Recipes (V2) - Building APIs with GraphQL Transform

Collapse
 
dabit3 profile image
Nader Dabit

Hey Herman, thanks for pointing this out! The Post type should indeed also have auth rules. The operations: [create, update, delete] setting will allow anyone to query & view the posts, but only the creator to be able to update and delete.

I've updated the post to reflect this change.