authorization search/add