first implementation of authorization container