ImpersonationTokens / PersonalAccessTokens should not be created via PersonalAccessTokensFinder

Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.

• Close this issue

As mentioned in https://gitlab.com/gitlab-org/gitlab-ce/merge_requests/22916#note_117630911, token creation should not go through PersonalAccessTokensFinder.

/cc @stanhu