modify authorization