You are trying to use the entity-control-boundary analysis to design an MVC architecture.
Indeed, all the classes in your diagram belong to the „logical domain“, so are entities in the ECB logic, and model in the MVC.
The boundary classes would be the GUI classes that interact with the user. They are indeed missing in the original diagram.
But be careful: the ECB approach has some similarities with the MVC pattern it is not the same: the controller has a very different purpose:
- In MVC the controller has the monopoly of user input, and user commands, whereas in ECB the user input would go to the boundary.
- In ECB, the controller represents a use case with domain logic as well, whereas all the domain logic goes into the model in MVC.
Depending on whether you want to use ECB or MVC, your class design would therefore be different:
- In an ECB architecture, the boundary (GUI in your case) is indeed not supposed to interact with the entities (see in the wikipedia article the section on “robustness”). Your schematic adjustment would be ok. If it was an exercise about use case driven approach it’s ok.
- But in ECB, you’d be supposed to have a distinct controller for each use case. These are missing. You’d also be supposed to have a separate boundary for each combination of actor and use case. These might be missing, unless you’d have the same user interface for both use-cases.
- In an MVC architecture, the model is supposed to know about the view to update it (the view is an observer of the model), in which case a link would be missing.