ODATA and WebAPI how to manage access?

Question

ASP.NET

Colleagues welcome! I'm looking at odata based on webapi and ef6.
Prompt by what means it is possible to restrict access to data at the level of service?
For example scenario: I want an authorized user to see only orders where he is autor and not be able to see the data from the pays table?
And is it possible to map the query string? I don't really want to expose the structure of the database