the plugin is made by me and is stable. It is the only thing that gives you field level controls over the API trough a UI sadly enough. you can do it programmatically with with polices what the plugin does behind the screens. How to build a Secure Web App with Strapi Policies