Fix authorization constraint