authorization service and queryable extensions