user authorization et all