Overall design diagram shows all moving parts; data flow is from left to right. Detail pages for each process follow.
Functionality is managed and secured with authentication and authorization via HTTP interceptors. Account creation and management runs under the 'super' role:
Relevant code:
