TMSS-138: Restrict access to Cycle view via REST calls, add tests to demonstrate use of groups and permissions