GrapQL queries allowed only