diff --git a/app/auth.go b/app/auth.go
index cdc4c28..1746d64 100644
--- a/app/auth.go
+++ b/app/auth.go
@@ -115,7 +115,7 @@ func AuthorizeOperation(ctx context.Context) error {
 	object := graphql.GetRootFieldContext(ctx).Field.Name
 	action := string(graphql.GetOperationContext(ctx).Operation.Operation)
 
-	if object == "__type" {
+	if object == "__type" || object == "__schema" || object == "__typename" {
 		return nil
 	}