[origin-server-ui-163] When filtering by owner must respect token visibility