Documenting authorization