eshop-catalog-server/me.ahoo.wow.example.eshop.catalog.server/CatalogAuthorization

CatalogAuthorization

@Configuration(proxyBeanMethods = false)

Who changes the catalog. Its aggregates belong to the tenant: every caller reads every product, and the catalogAuthorizer keeps the buyers, owner-level callers, from changing them. An employee, a tenant-level caller, changes it: in development, a Wow-User without a Wow-Owner (the host's development callers); behind the CoSec gateway (the cosec profile), a principal of the role wow.cosec.tenant-level.roles: employee.

Constructors

constructor()

Functions

catalogAuthorizer

@Bean

fun catalogAuthorizer(): CommandAuthorizer

Only an employee, or the anonymous caller of a service tried out, changes the catalog: a buyer reads it. The snapshot rebuild, a system command of Wow's built-in aggregates, is an employee's alone: with an authorizer of the service's, the public port leaves those to it.