lots of authorization work