Added a TODO: add authorization based on external state