fixed members spec for authorization