docs: function apiAuthorizer (args, ctx, acl) {
      const { token = {}, groups } = ctx;
      const { groups: tokenGroups = [] } = token;
  
      if (typeof acl === 'function') {
          return acl(args, ctx);
      }
  
      let check = groups;
      if (Array.isArray(acl)) {
          check = [...groups, ...acl];
      }
  
      return tokenGroups.some(g => check.includes(g.group));
  }