authorizations for users done