edit authorization