Hasura does role based access control pretty well. Apollo federation and implementation of supergraph and nested graphs is pretty robust We use both in produc

Hasura does role based access control pretty well. Apollo federation and implementation of supergraph and nested graphs is pretty robust We use both in production at reasonable scale and complexity 10+ roles few hundred object models, 100s of request/sec