Requires the authenticated principal to hold any of the given permissions.
May be applied at the class or method level (method overrides class).
Enforced by DecoratorPlugin unless enforceRoles: false, with the same
401/403/absent-provider-501 behaviour as @Roles. A route carrying
both @Roles and @Permissions requires (any role) AND (any permission).
Requires the authenticated principal to hold any of the given permissions. May be applied at the class or method level (method overrides class).
Enforced by
DecoratorPluginunlessenforceRoles: false, with the same401/403/absent-provider-501behaviour as@Roles. A route carrying both@Rolesand@Permissionsrequires (any role) AND (any permission).