Graphql permissions for relations

Questions and Answers Strapi Backend
2

I’ve found a semi-solution using this:

// Disable REST endpoints
context.strapi.controller("api::travel.travel").find = (ctx) => ctx.unauthorized();

Not very clean but it works as needed.