Authentication and permissions in gCTS