added authorization tests for the setting flag