managing authorizations