What are people using for permissions in graphql?

This looks cool: https://github.com/maticzav/graphql-shield

I’ve used https://github.com/thebigredgeek/apollo-resolvers in a similar way

What are other folks doing? Particularly apollo/meteor users.