moved class and node authorization to PEP