authorisation lock