Support for permissions-based access controls

[ioquatix]

Hello,

We'd like to perform a GraphQL query within Hasura, such that we can provide an explicit list of permissions and check those permissions against the table and/or columns.

My understanding is we can only use a single role for a query however my understanding might be incorrect.

Permission-based access control means that we provide a tuple of permissions along with the query, and the query is acceptable if all permissions required to access the data are provided as part of the query (i.e. a JWT with multiple grants/permissions).

Thanks for any help you can provide to help me with my understanding of how we can implement such a permissions model.