fixed bugs in detecting authorisation and privacy cascading