code: func (kc *kubeClient) CanGetApplication() (bool, error) {
  	// Also need access to builds in user namespace
  	ok, err := kc.checkAuthorizedInEnv(getBuildsRules, environmentTypeUser)
  	if err != nil {
  		return false, err
  	} else if !ok {
  		return false, nil
  	}
  
  	for envName := range kc.envMap {
  		if kc.CanDeploy(envName) {
  			ok, err := kc.checkAuthorizedInEnv(getDeploymentRules, envName)
  			if err != nil {
  				return false, err
  			} else if !ok {
  				return false, nil
  			}
  		}
  	}
  	return true, nil
  }
docs: // CanGetApplication returns whether the user is authorized to call KubeClientInterface.GetApplication