Authorization rule update