More authorization changes in view and controller