implement grant_auth op