throws AuthorizeException