edited auth permissions