https://www.somethingsblog.com/2024/10/22/mastering-graphql-permissions-a-complete-guide/