Security Implementation In Domain Driven Design

Question

Hi all,

We're working on a web project that is built on Sharp Architecture. We've put all our interfaces to "Core" layer and put all the implementations to related projects.

Just one question;

For the security system we' ve just put the basic interfaces to Core layer and created the security service project for the implementation for these interfaces. Is that right? I'm little bit confused.

Thanks!