Annotation Interface RequiresAdmin
Marks a CloudForge Manager REST controller method as requiring the caller hold a privileged
role (
admin/manager) or the operations:run policy — the same bar
destructive/high-blast-radius operations have always used, distinct from a single named
policy.
Enforced by AuthorizationInterceptor against
com.cloudforgeci.manager.web.AccessGuard#requireCaller followed by
com.cloudforgeci.manager.auth.AuthService#requireAdminCaller(Caller). See
RequiresAccess for the "every method must carry exactly one of these four annotations"
contract.