db read authorization