"Because of the anemic nature of query models, I find it hard to solve problems" - Why do you feel that way, could you elaborate? In Vernon's example you linked to, the domain model is just as anemic. Note that there's a difference between "user has the right to access something" (application logic), and "user has the ability to exec an operation if a condition is met, assuming access was already granted" (core domain logic). For the access rights, you just need to know what you're accessing (perhaps via some metadata), and if you are allowed to - then filter or prevent the query.
↧