About access control in context of this article, Hasura gives GraphQL APIs with a role-based-access-control layer that can be integrated with any standard auth system.

https://docs.hasura.io/1.0/graphql/manual/auth/index.html

PS: I work at Hasura