applying authorisation on location