Adding per-user authorization on api