Authorize dynamic attributes for object list serializaton