new authorization mapping