To clarify for anyone coming to this thread: @amaster507 did reproduce the bug and acknowledged that in a DM. The steps in @auth directives don't apply to nested objects when using interfaces? - #6 by elhil should be enough to reproduce. (I used GraphQL mutations to input the data but those rdfs should work)