fix for authorizing creation of data objects