authorization validation work