Entity Access Control provides secure way to expose IQueryable to REST Clients with simple security rules in the form of lambda expressions. It is better alternative than OData and GraphQL, as you can use lambda expressions (arrow functions) in JavaScript to easily query the database.

1. Lambda Expressions for Security Rules.
2. Security Rules with Navigation Properties
3. Security Rules for Insert/Update and Delete
4. Asychronous Events
5. Single REST API EndPoint for accessing Entities

Documentation