Plug for current user

[idi527]

I do it like this currently

Should user permissions / data correctness logic live in my Ecto validations or Context logic?

I’m trying to do it like you describe in approach B. I define “policies” for protected resources and call them from the context. @spec create_transaction(map, by: %User{}) :: {:ok, %Transaction{}} | {:error, Ecto.Changeset.t} | no_return def create_transaction(attrs, by: %User{id: uid} = user) do Policy.authorize!(:create_transaction, user) %Transaction{user_id: uid} |> Transaction.changeset(attrs) |> Repo.insert() end and then in ledger/policy.ex I have something like this defmodule…

Trying to mimic http://trailblazer.to/