Actor name in camelCase. MUST match exactly a user type/table defined in the database schema (and an analyzed actor).
Business roles (grades) within actor allowed to call the operation.
null (or an empty array, which is normalized to null) means any
authenticated caller of actor may access the operation — no grade
restriction beyond the actor itself. When non-empty, the caller must hold
at least one listed role; a role that transitively inherits a listed role
also qualifies (e.g. an owner that inherits manager satisfies a
required manager). A caller who is the right actor but holds none of
these roles MUST be rejected with HTTP 403 at the authorization provider
boundary — the "right actor, insufficient grade" case. Each entry MUST be
a role name declared on the actor's analyzed roles
(AutoBeAnalyze.IActorRole).
Actor-and-grade requirement that guards a single API operation.
Pairs the authenticated actor with the business roles (grades) a caller must hold within that actor. Used as IAuthorization.access.