private Map<ResourceDescriptor, Set<ResourceAccessType>> getSharedAccess(
            Set<ResourceDescriptor> resources, ProxyContext context) {
        String actualUserLocation = BucketBuilder.buildInitiatorBucket(context);
        String actualUserBucket = encryptionService.encrypt(actualUserLocation);
        return shareService.getPermissions(actualUserBucket, actualUserLocation, resources);
    }
Application makes a call to read own configuration on behalf of user.
server/src/main/java/com/epam/aidial/core/server/security/AccessService.java