Query private collection types associated to the authenticated user

Questions and Answers
1
System Information
  • Strapi Version: v4.4.3
  • Operating System: Linux x64
  • Database: Postgres
  • Node Version: 16.17.1

Hey, Strapi community.

Is it possible to query related types with restricted visibility? For example, I have a collection type Users and they can have multiple Orders. I want to get all orders associated with the authenticated user with the following GraphQL query.

query UserOrders {
  me {
    orders {
      ...
    }
  }
}

I can just query the orders if I enable “find” for the “authenticated” role. But if I enable this, I’ll allow any authenticated user to query all the orders from all users. Is it possible to keep an order visible only if the authenticated user has any relation with them?