We provide an access control layer as a part of the GraphQL engine. We took inspiration from Postgres's RLS and basically implemented it at the API layer so th

We provide an access control layer as a part of the GraphQL engine. We took inspiration from Postgres's RLS and basically implemented it at the API layer so that the permissions/access control system is driven by your application auth and not your database auth. This allows Hasura to give you role-based column/row level security integrated with any authentication provider or even a JWT. More at the docs here: https://docs.hasura.io/1.0/graphql/manual/auth/index.html https://docs.hasura.io/1.0/graphql/manual/auth/index.html