Changed authorization to use a consistent meaning for the 'item' context