authorize on events#file