admin flag
authorization is ok