Dynamic parse attribute names works, not authorization