SmartExchange · .NET 10 · Implementation guide
ACL Implementation
Shared authorization code for Intaker and Web API: contracts, implemented methods and deployed policies.
Nine focused chapters
Implementation overview
Shared flow and implementation status.
02Packages and boundaries
Projects, classes and future NuGet ownership.
03CRM annotations and Diagram
Explicit declarations and generated metadata.
04Generated relationship registry
Consumers, normalization and scope validation.
05Principal context and Policy
Paired grants, principals, derived roles and complete export policies.
06PlanResources → AST → SQL
Paired requests, expected AST and SQL enforcement.
07Intaker and Web API integration
Current Intaker calls and proposed Web API calls.
08Deployment and validation
Live ConfigMaps, connection and remaining validation.
09InterestedParty read and Project Scope
Both export paths and the verified InterestedParty/read migration.
Generic code, explicit decisions
The resolver, registry generation, Cerbos client and supported SQL translator are shared. CRM annotations explicitly declare relationships; YAML explicitly selects actions, grant conditions and role usage. Applications supply trusted identity, instance binding and query aliases.
This guide describes implementation. Cerbos/ACL fundamentals belong to the earlier analysis presentation. Code, live runtime and future steps are distinguished throughout.