permit-authorize