add more authorization specs for creating, editing, deleting resources