Very good question Varun.
Consider an Order Management component (e.g. the ODA component for order delivery TMFC003). This is not necessarily the same software element as Product Inventory (e.g. in ODA there is a different component TMFC005). And I can tell you that in at least one vendor offering (Amdocs, my employer) the product inventory is not part of the order delivery component.
At some point, this component will have to update the product inventory, and it will do this by invoking the POST or PATCH endpoints of TMF637.
Clearly these endpoints should be protected from invocation by non-privileged processes.
Hope it helps
------------------------------
Jonathan Goldberg
Amdocs Management Limited
Any opinions and statements made by me on this forum are purely personal, and do not necessarily reflect the position of the TM Forum or my employer.
------------------------------