Currently within Cluster Logging, the Loki gateway ensures that queries are restricted to the allowed namespaces, based on user token/rbac.

With NetObserv, the logic must be adapted since queries refer not to a single namespace, but to a source and a destination namespace.

(to be completed)