authorization rights
view edit