fixed issue with authorization levels