this call can be moved to the authorization manager(which can use the util)