authorization for search