GraphQL Auth on predicates

What would the efficient solution be? Since the admin-controlled ‘status’ predicate is very important and is mandatory to most of the nodes?