auth items tree