refactors authorizations in user view