How are permissions configured for metadata?


Hello everyone
For example, if I have a Users type and an Organizations type where Organizations can have many Users. I am exposing the Organization data publicly, but don’t want people to be able to query the count of Users associated with the Organization, which is possible even though they can’t query details on the Users given the permission settings.

I’ve combed through the docs and haven’t encountered this. Apologies if I’ve missed something.