own authorization working