[v2.0.0-alpha.10] Relationship field query not respecting permissions

I've recently upgraded from v1.3.3 to v2.0.0-alpha.10 and I'm facing some issues that didn't exist before, so I've setup a test instance on Heroku to isolate them. I can share the instance if needed, but it's easily reproducible.

I created a `list_item` table with a field `user_id` referencing `user` (`id`, `name`), with the proper foreign keys and relationships. On the permissions tab for `list_item` I have **not** allowed `user_id`. I've populated it with some test data.

However, this query works:
```gql
{
list_item {
#user_id
user {
id
name
}
}
}
```

If i uncomment `user_id` I get the proper error that it doesn't exist.