private static List<Rule> adminRules(JsonObject settings) {
        String rules = settings.getJsonObject("admin").getJsonArray("rules").toString();
        List<Rule> list = ProxyUtil.convertToObject(rules, Rule.LIST_TYPE);
        return (list == null) ? List.of() : list;
    }
Application makes a call to read own configuration on behalf of user.
server/src/main/java/com/epam/aidial/core/server/security/AccessService.java