Restricting relationship fields in query

### Is your proposal related to a problem? Yes

When we are exposing APIs to our customers.
We need to restrict some of the relationship queries.
Eg:
- There are 2 tables, users & orders
- When we query the API we don't want them to query the orders as a user field
- But when on the orders query they can pass the user id in the where clause

### Describe the solution you'd like

- Ability to add permissions in relationships as we do in columns leven
- Ability to restrict what arguments we need to expose

### Describe alternatives you've considered

- Restricting order table - this will prevent users from accessing the table itself
- Creating an API with schema stitching where I filter the unwanted fields