Add authorization checks to target apis