In Hasura, I have a public role in my users table which is used on my site to display some users in a leaderboard section.
They can be accessed and seen by public since these info include scores, name, and basic info of users.
However, my main issue is that since some of the users are not included in the leaderboard, there's a way for the public to see the rest of the users who aren't even listed on the website.
What would be the best way for me to prevent the public from getting every info on my users table?
I'm thinking of moving my queries to REST API so that I can disable the access of the public role. Any suggestions?