Find a way to handle permissions
Permissions are handled on the back-end and are not exposed in the schema.
If a user tries to retrieve several attributes for an entity and one is forbidden, the whole request will fail and the client will not be able to recover from the error.
For simple permissions indicating authorized groups for actions (eg: 'read': ('managers', 'users', 'guests')
), a solution would be to fetch the current user group and act accordingly.
In case the permissions are RQL requests, the only way is to generate the request on the server.