GraphQL Server Best Practices

scope the query to the set of customers the current seller has access to:

class Types::CustomerType < Types::BaseObject
  implements GraphQL::Relay::Node.interface

  def self.object_from_id(id, context)
    CustomerRepository.find(context[:seller], id: id) # or: context[:seller].customers.find_by(id: id)
  end

  field :name, String, null: true
  field :name, Email, null: true
  # ...
end