Authorization in my app is somewhat complicated; I have various resources, and I often have to validate the current user's relation to that resource before allowing them access.
is a custom function that wraps a mutation in an authorization check, which is defined by the config. - The types of the query and config are related, because the authorization check uses the procedure's input.