assigning security manager may need some rework