ref: authorized?