edit User authorization