[VP] authorization