Added further authorization to ensure correct user. to ch 9.2.3