make authorization apply the permissions based on the object type