The caller's own notifications
GET/admin/notifications
Only the signed-in operator's rows — there is no route that reads someone else's. It answers the ones for the active casino plus the product-level notices, which belong to no casino and must not disappear when the reader switches.
No permission, only a session and an active casino: ownership is the authorization.
Request
Responses
- 200
- 400
- 401
- 403
- 404
The caller's notifications
X-Tenant-Id is missing
No session cookie, or it expired
The caller is not a member of this casino
No such casino