public static Map<ResourceDescriptor, Set<ResourceAccessType>> getAppSelfAccess(Set<ResourceDescriptor> resources, String sourceApp) {
        Map<ResourceDescriptor, Set<ResourceAccessType>> result = new HashMap<>();
        for (ResourceDescriptor resource : resources) {
            if (resource.getType() == ResourceTypes.APPLICATION
                    && !resource.isFolder()
                    &&  resource.getDecodedUrl().equals(sourceApp)) {
                result.put(resource, ResourceAccessType.READ_ONLY);
            }
        }
        return result;
    }
Application makes a call to read own configuration on behalf of user.
server/src/main/java/com/epam/aidial/core/server/security/AccessService.java