Autorization controller