bug 7688: (follow-up) add authentication checking