[ralusek]

To me it always come down to permissions. I've tried firebase, I've tried graphql. I just can't use them for anything other than admin endpoints or things with very simple permissions. I'm glad the author mentioned permissions, but I would need to see some seriously compelling evidence that I could trust a declarative, resource-based permissions system to accomplish what I need.

[stopachka]

Facebook’s EntFramework did this _very_ well. I haven’t come across any essays that go deeply on it, but maybe from this comment someone will suggest an essay / if they are ex-fb write it up.

[Garlef]

> declarative, resource-based permissions system

Isn't this how AWS does it?