catalogAuthorizer

Only an employee, or the anonymous caller of a service tried out, changes the catalog: a buyer reads it. The snapshot rebuild, a system command of Wow's built-in aggregates, is an employee's alone: with an authorizer of the service's, the public port leaves those to it.