add authorization check before executing a command