Implement entity-level access control in mgamadeus/ddd DB repositories.
npx skills add https://github.com/mgamadeus/ddd --skill ddd-rights-specialist
Please help me install this Agent Skill. Skill: ddd-rights-specialist Source: https://github.com/mgamadeus/ddd/tree/main/.claude/skills/ddd-rights-specialist Command: npx skills add https://github.com/mgamadeus/ddd --skill ddd-rights-specialist
Implement entity-level access control in the mgamadeus/ddd framework to enforce read/update/delete restrictions, property hiding, and role-based governance across DB repositories.
Override the rights methods in your DB repositories and validate end-to-end rights behavior with a test account.
High-intent search queries and answers about installing and using this skill.
Entity-level access control in a PHP DDD repository is implemented by overriding applyReadRightsQuery, applyUpdateRightsQuery, and applyDeleteRightsQuery methods to filter database operations based on role requirements and property hiding.
The best way to secure data updates using role-based access in DDD is to define RolesRequiredForUpdate on entities and apply update rights query filters, ensuring only authorized roles can modify restricted records.
Yes, you can bypass access control filters for privileged system operations in DDD repositories by utilizing rights snapshots, allowing system processes to execute unrestricted read, update, and delete actions.
Left-join based filters and subqueries handle tenant scoping in access control by modeling multi-hop join chains across direct columns, enabling complex tenant, world, and account-level data isolation during repository queries.
Yes, this DDD rights framework supports post-load property hiding through the mapToEntity method, allowing you to mask sensitive entity attributes after data is retrieved from the database.
thapaliyabikendraConfigure EF Core ABP patterns for PostgreSQL code-first development.
nguyenpv1980-wqAudit Postgres row-level security policies for tenant isolation failures.
whatagraphJoin multiple marketing data sources into a single virtual source.
doorscomputersEnforce role-based access control across API routes, UI elements, and data access.
