added rights to get_gids method to controller