fixed conventions for authorization of commands