If you look at the demos, it looks like you can do RBAC security. The user id is... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		netghost on Dec 13, 2016 \| parent \| context \| favorite \| on: PostGraphQL: PostgreSQL meets GraphQL If you look at the demos, it looks like you can do RBAC security. The user id is stored into a session (transaction?) local variable, and then used to filter various tables using postgres' row based security model.

floatboth on Dec 13, 2016 [–]

Makes sense — PostGraphQL was inspired by PostgREST, and that's exactly what PostgREST does.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact