Retrieve purchased digital files

Purpose

Buyers and support staff obtain private files through the download grants associated with purchased products.

How It Works

The caller requests a file through a download grant. Commerce resolves the grant and confirms the file belongs to the granted product’s listing. Member requests pass through entitlement consumption and receive a signed link when authorized. Repeated requests retain the entitlement result associated with their request reference. Support requests obtain the link without consuming member capacity. Foreign grants and unavailable files produce access or not-found responses. The product should explicitly review the staff bypass of expiry checks and confirm this deferred download scope.

Relationships

The prepare and publish product presentations capability supplies related configuration or assessment used in this work.

Show evidence (sources, provenance, origins, pinned commits)

The Formal Contract

The narrative above explains; the sections below are authoritative — the rules, scenarios and tests this document binds.

Outcomes: Grant ownership controls member access to purchased files.Finite capacity remains protected while retries and support preserve available uses.
Surfaces: portalconsoleapi

Controls

24 controls apply, from the corpus control catalogue.

TC-AZ-001 TC-AZ-002 TC-AZ-003 TC-AZ-004 TC-AZ-006 TC-TEN-001 TC-TEN-002 TC-TEN-003 TC-TEN-004 TC-CRY-001 TC-DAT-001 TC-DAT-002 TC-DAT-003 TC-DAT-004 TC-LOG-001 TC-LOG-002 TC-LOG-003 TC-LOG-004 TC-LOG-005 TC-PI-001 TC-PI-002 TC-PI-005 TC-PRV-001 TC-PRV-002

Permissions

Key	Checked at	Scope
`commerce.downloads.read`	api	tenant

Business Rules

6 rules, 4 to be proved before approval. A rule's product intent is derived from its origin: 0 confirmed by a product decision, the rest inheriting this capability's proposed.

Id	Rule	Kind	Enforced at	Provenance
`01`must prove Proposed	A download is available to its grant’s owner or console support staff, while another member is denied access. no proof recorded yet	permission	service	test services-commerce:modules/catalog/tests/e2e/downloads.e2e.spec.js#refuses an expired grant 409 and another member’s grant 403
`02`must prove Proposed	A limited grant consumes one use for each request key and file, preserves the remaining count on retries and refuses further new downloads after exhaustion. no proof recorded yet	calculation	service	test services-commerce:modules/catalog/tests/e2e/downloads.e2e.spec.js#gives the grant’s owner a signed link and consumes one use per Idempotency-Key (a retry costs nothing), until the grant is exhausted (409)
`03` Proposed	Unlimited download grants retain an unlimited remaining count.	calculation	service	test services-commerce:modules/catalog/tests/e2e/downloads.e2e.spec.js#never counts an unlimited grant
`04`must prove Proposed	Support downloads leave the buyer’s remaining uses unchanged. no proof recorded yet	policy	service	test services-commerce:modules/catalog/tests/e2e/downloads.e2e.spec.js#gives a console user the link without consuming a use
`05`must prove Proposed	Member downloads reject expired and revoked grants; unknown or wrong-kind grants and unrelated files are not found, while staff downloads bypass consumption and its expiry checks. no proof recorded yet	validation	service	test services-commerce:modules/catalog/tests/e2e/downloads.e2e.spec.js#answers 404 for a grant of another kind, an unknown grant, and a file the product does not have
`06` Proposed	Successful download requests return a signed private-file link that expires after fifteen minutes.	policy	service	observed services-commerce:modules/catalog/services/downloads/downloads.ts:downloadFile

Scenarios

Id	Given	When	Then	Provenance
`01`	A member’s download grant has finite capacity	Use distinct keys through its capacity and attempt one further download	Allowed requests receive signed links and the new exhausted request fails	test services-commerce:modules/catalog/tests/e2e/downloads.e2e.spec.js#gives the grant’s owner a signed link and consumes one use per Idempotency-Key (a retry costs nothing), until the grant is exhausted (409)

Planning

Retrieve purchased digital files ​

Purpose ​

How It Works ​

Relationships ​