use [String] instead of BitMask for Authorization