LawJolla

mutation {
  updateAskingPrice(id: "1", newPrice: 10000) {
    id
    year
    make
    model
    askingPrice
  }
}

LawJolla

type Vehicle {
  id: ID!
  year: Int!
  make: String!
  model: Int!
  askingPrice: Float @isAuthenticated
  costBasis: Float @hasRole(role: “MANAGER”)
  numberOfOffers: Int @hasRole(role: “MANAGER”)
}

LawJolla

type Vehicle {
  id: ID!
  year: Int!
  make: String!
  model: Int!
  askingPrice: Float @isAuthenticated
  costBasis: Float @hasRole(role: “MANAGER”)
  numberOfOffers: Int @hasRole(role: “MANAGER”)
}

LawJolla

export const schema = makeExecutableSchema({
  typeDefs,
  resolvers,
  directiveResolvers
});

LawJolla

const Query = {
  vehicles: (parent, args, context, info) =>
      context.db.query.vehicles({ where: { dealership: args.id } })
}

LawJolla

const directiveResolvers = {
  ...,
  hasRole: (next, source, {role}, ctx) => {
    const user = getUser()
    if (role === user.role) return next();
    throw new Error(`Must have role: ${role}, you have role: ${user.role}`)
  },
  ...
}

LawJolla

directive @isAuthenticated on FIELD | FIELD_DEFINITION
directive @hasRole(role: String) on FIELD | FIELD_DEFINITION

...

type Mutation {
    updateAskingPrice(id: ID!, newPrice: Float!): Vehicle! @hasRole(role: "MANAGER")
}

...

LawJolla

const Query = {
  vehicles: async (parent, args, context, info) => {
    const vehicles = await context.db.query.vehicles({
      where: { dealership: args.id }
    })
    const user = getUser(context)
    return protectFieldsByRole(
      [
        { field: `costBasis`, role: `MANAGER` },
        { field: `numberOfOffers`, role: `MANAGER` }

LawJolla

const Query = {
  vehicles: async (parent, args, context, info) => {
    const vehicles = await context.db.query.vehicles({
      where: { dealership: args.id }
    })
    const user = getUser(context)

    return vehicles.map(vehicle => ({
      ...vehicle,
      costBasis:

LawJolla

const Mutation = {
  updateVehicleAskingPrice: async (parent, { id, askingPrice }, context, info) => {
    const userId = getUserId(context)
    const isRequestingUserManager = await context.db.exists.User({
      id: userId,
      role: `MANAGER`
    })
    if (isRequestingUserManager) {
      return await context.db.mutation.updateVehicle({
        where: { id },