Annotation Interface RequiresPolicy

@Retention(RUNTIME) @Target(METHOD) public @interface RequiresPolicy
Marks a CloudForge Manager REST controller method as requiring a resolved caller who is permitted the named policy. value() is a plain policy-ID string matching one of the constants in com.cloudforgeci.manager.auth.ManagerPolicyCatalog (e.g. "deploy:create") — deliberately a String, not an enum, so this annotation (which lives in cloudforge-core and knows nothing about Manager's policy catalog) never needs to change when a new policy is added there.

Enforced by AuthorizationInterceptor against com.cloudforgeci.manager.web.AccessGuard#requireCaller followed by com.cloudforgeci.manager.auth.AuthService#requirePermission(Caller, String). See RequiresAccess for the "every method must carry exactly one of these four annotations" contract.

  • Required Element Summary

    Required Elements
    Modifier and Type
    Required Element
    Description
    String
    value
     

  • Element Details