Added ctnruser permissions in backends and implemented it in ctnr.views