added simplistic authZ check