Authorizing CAS services to access custom attributes