user authorization and association