Embodiments of the claimed subject matter provide a method of controlling access to resources in a social graph. One embodiment of the method includes receiving information for configuring a query in response to a service being invoked. The service is configured to use the query to request access to resources associated with a node in a portion of a social graph associated with a first user. The method also includes associating the query with the node. The query operates on the resources associated with the node and returns information indicating whether a request to access the resources is granted or denied depending on a current state of the social graph.