GCMAPP-9: Authorization rules