added authorization for all link actions