In Onion framework, outer layer can access all the inner layers. If I go by this, my outer layer (which is UI layer/Controller in MVC) can directly access application/business services and repositories as well. Now, my controller can create a domain model and persist it in datastore by using repository. And thus bypass the validation and other business rules written in business layer. I believe, I am missing something. Please help.
public SpeakerController(IConferenceRepository conferenceRepository,
IUserSession userSession, IClock clock)
: base(userSession) {
_conferenceRepository = conferenceRepository;
_clock = clock;
_userSession = userSession; }
from http://jeffreypalermo.com/blog/the-onion-architecture-part-2/