user added and authorization