Export Access Guard
Component Detail
Service Layer
low complexity
mobilebackend
0
Dependencies
1
Dependents
1
Entities
0
Integrations
Description
Enforces that only Coordinators and Organization Admins can trigger Bufdir exports, in accordance with the access control requirements stated in the feature. Delegates role resolution to the shared Role Guard Service pattern established in the role-based-access-control feature.
export-access-guard
Responsibilities
- Check that the authenticated user has Coordinator or Org Admin role
- Throw an authorization error if the role check fails
- Provide a synchronous can-export predicate for UI gating
Interfaces
assertCanExport(userId)
canExport(userId)
getExportAllowedRoles()