Performance about queries and document access

[Moumouls]

Hi,

I'm interested in Payload. I'm an open-source contributor on the Parse platform team (https://parseplatform.org/). It seems that the approach (Schema, GraphQL, Hooks, Auth) is similar to Payload.

In Parse Server, we have something called ACL, which is a field stored on each object with a list of users or roles. So when a query is performed by a user, a query constraint is applied to only return relevant objects. It's also easy to index for performance.

I noticed that the security system of Payload is based on functions, if I'm correct. Are constraints added to the query based on these functions, or is it a filter applied after the response from MongoDB?

By the way, great work! The default support for Next.js is really interesting.