Access Control

The Access Control module governs who may do what in Study Setup: authentication, roles, study-scoped permissions, and restricted external reviewer access.

Authorization is modeled as a uniform validation concern on commands — the single choke point through which every state change already flows. (see Commands and Events)

Principle: authorization is command validation

Every meaningful change in Study Setup is expressed as a Command with explicit validation criteria, and a command that fails validation produces no events. Authorization is simply one universal criterion on every command:

The actor is authorized to issue this command, for the given scope.

To be defined

The following key aspects are still to be defined:

• Definitive roles to support
• Authorization / Permissions model
• Need for dedicated authorization querying capabilities