Required repetition of Auth rules

[amaster507 (Anthony Master)]

See if this helps give context to the current handling:

Scope of Auth Directive Query Rules

Yeah, the basic issue here is that we don’t compile auth rules into other auth rules. There’s two reasons for the current behaviour: firstly, to make each rule ‘self contained’ so that you don’t need to understand all the rules to understand a single rule, and secondly because it’s pretty easy to get into recursive situations where rules depend on each other in a cycle. The initial plan was that because the rules are all GraphQL, we’d move towards being able to upload a .graphql operations fil…