I like to create Enforcing access permissions as described here, so I can do Authorization and ACL https://www.apollographql.com/docs/graphql-tools/schema-directives/#enforcing-access-permissions I cant find anything in the documentation