9. A system, comprising: a configuration management data base (CMDB) maintained in one or more non-transitory computer-readable mediums to store descriptions of components of an information technology (IT) infrastructure and to store a base graph describing relationships between components of the IT infrastructure; a query logic to execute a base topological query on the base graph to produce a base result graph; a restriction logic to restrict the base result graph as a function of a filter query to produce an authorized graph upon detecting a hook node in the base topological query that is shared with the filter query; and a provision logic to provide the authorized graph.
9. A system, comprising: a configuration management data base (CMDB) maintained in one or more non-transitory computer-readable mediums to store descriptions of components of an information technology (IT) infrastructure and to store a base graph describing relationships between components of the IT infrastructure; a query logic to execute a base topological query on the base graph to produce a base result graph; a restriction logic to restrict the base result graph as a function of a filter query to produce an authorized graph upon detecting a hook node in the base topological query that is shared with the filter query; and a provision logic to provide the authorized graph. 13. The system of claim 9 , where restricting the base result graph as a function of the filter query comprises controlling the query logic to execute the filter query on the base result graph.