init

crates/application/src/authorization.rs

@@ -0,0 +1,11 @@
+use domain::errors::DomainError;
+use domain::user::UserId;
+
+use crate::errors::ApplicationError;
+
+pub fn verify_ownership(resource_owner: &UserId, caller: &UserId) -> Result<(), ApplicationError> {
+    if resource_owner != caller {
+        return Err(DomainError::Forbidden("access denied".into()).into());
+    }
+    Ok(())
+}