How can we allow user to update/get/post only own data with GraphQl?

Hi,
You can use a policy linked to your endpoints

You want to do something close to How to not allow an end user to update/delete another end user's post?

For policy linked to a Graphql endpoint, see GraphQL - Strapi Developer Docs