def _validate_decrypt_query_parameter(self, decrypt, scope, requester_user):
        """
        Validate that the provider user is either admin or requesting to decrypt value for
        themselves.
        """
        rbac_utils = get_rbac_backend().get_utils_class()
        is_admin = rbac_utils.user_is_admin(user_db=requester_user)
        is_user_scope = scope == USER_SCOPE or scope == FULL_USER_SCOPE

        if decrypt and (not is_user_scope and not is_admin):
            msg = "Decrypt option requires administrator access"
            raise AccessDeniedError(message=msg, user_db=requester_user)

        Validate that the provider user is either admin or requesting to decrypt value for
        themselves.
        
st2api/st2api/controllers/v1/keyvalue.py