Minor fix in authorization rule