terminology for authorization