acting
The caller caller acts as on a route that reads no aggregate type of its own, such as a service route: in the target scope and its tenant when it names one and may act across scopes, else in its own. Throws the QueryErrors.FORBIDDEN QueryError that refuses it.