authorization in all publish methods is now requered