It doesn't belong in the spec, it belongs in the implementation. But yes, the re... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		peterhunt on Feb 16, 2016 \| parent \| context \| favorite \| on: Why I No Longer Use MVC Frameworks It doesn't belong in the spec, it belongs in the implementation. But yes, the reference implementation (graphql-js) should probably be updated to demonstrate access control.

carsongross on Feb 16, 2016 [–]

> I think you misunderstand what GraphQL is.

> For each node type and edge type in the graph, you provide a required canSee() function which controls its visibility.

> It doesn't belong in the spec

_kek_

Am I on candid camera?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact