simple authorization system(without any unauthorized access)