eshop-ordering-server/me.ahoo.wow.example.eshop.ordering.server/OrderingAuthorization

OrderingAuthorization

@Configuration(proxyBeanMethods = false)

Who ships an order. An order is its buyer's: the buyer reads it, and the kernel keeps every other buyer from it. The orderingAuthorizer keeps the buyer from shipping it, which only an employee does, a tenant-level caller: in development, a Wow-User without a Wow-Owner; behind the CoSec gateway, a principal of the role employee. The order process's commands reach the order on the context's command topic, outside admission, and a service's call on the internal port is a service identity's: the authorizer refuses neither.

Constructors

constructor()

Functions

orderingAuthorizer

@Bean

fun orderingAuthorizer(): CommandAuthorizer

A buyer may not ship its order; a scheduled job's commands and the snapshot rebuild, Wow's built-in aggregates' system commands, are an employee's alone. Every other command is the kernel's to keep in the caller's scope.