#DGTF-845: only return vulnerabilities of applications that user has access to