parameter mapping from url to authorization check