Should a controller be able to get entities through the repository pattern, or must it retrieve data from the services layer.
Ideally the controller should use only the service layer which itself depends on one or more repositories in order to aggregate one or more simple CRUD operations into a business operation. There are cases though in simple applications where you might not need a service layer and have the controller directly use a repository.