authorization variable check