ETI auth; roles; image privacy