Authorization in postObject