Fix access controls on buckets using authorize rules