I’m implementing a restaurant management micro-service using CQRS pattern.
The read and write databases are separated and eventually become consistent by async events using an event bus.

Now I want to create an Authorization policy that checks if the current user is a restaurant owner or not. I didn’t want to query the identity service for current roles because this seems to be responsibility of restaurant domain, and I also don’t want to be coupled to the identity service by using sync API calls.

1. Now the problem is that how I should fetch the data?
   Should I always use the write database?

   Or I should implement two policies for queries and commands, where the query controller uses read database and the write controller will use write database.

2. How should I handle the eventually consistency issue at the read side?