In reference to this sentence:
It makes way more sense (and should be) that teh catalog does not get involved in content fruition.
I assumed that a content knows the address of the catalog. This is necessary to be sure that the content access is allowed only to users who have acquired the license. This operation can be made in 2 different ways:
- the content asks the catalog if the user has permission before serving the content
- the catalog informs the content when a user acquires the license (I consider this option a bit inconsistent with the catalog purpose)
In both cases the content needs to know the catalog address: in the first case to contact it, int the second one because it needs to trust only the catalog. Indeed, the function must be public, and the content must to be sure that only the catalog can call it, otherwise everyone can add itself as granted user.
So, the catalog should not serve the content, but I do not understand how he can not be involved in the content fruition.
Thanks in advance for clarifications.