Catalog mode and product permissions
Catalog mode separates who may edit product details from who owns the canonical product name. It complements, rather than replaces, orgedit.
Partner and vendor ownership
A PARTNER owns the shared catalog relationship; a VENDOR is associated through partnerId. The web application uses that relationship to inherit catalog settings and to determine category scope.
RLS and category queries
Category lookups used in product naming must respect organization-level row-level security (RLS). A category ID submitted by a caller is not, by itself, proof that its name is visible or belongs in the caller's catalog.