Annotation Interface RequiresCaller
Marks a CloudForge Manager REST controller method as requiring a resolved caller identity, but
no specific
policy check beyond being authenticated — self-service
endpoints where the caller acts on their own account/resources use this (e.g. personal access
token management: a caller can always list/rotate/revoke their own tokens without needing a
named permission).
Enforced by AuthorizationInterceptor against
com.cloudforgeci.manager.web.AccessGuard#requireCaller. See RequiresAccess for
the "every method must carry exactly one of these four annotations" contract.