Authorization working for all entities