I inherited a graphql project that was a work of art in that respect. All access control etc was done in the database and triggers were effectively used the wo

I inherited a graphql project that was a work of art in that respect. All access control etc was done in the database and triggers were effectively used the works. The resulting application was a complete performance failure. Databases are slow and generally involve latency. They are a source of truth and an engine for querying. They are not meant to be your applications working data model.