Permission to access gallery REST resource