complete authorizing of controllers