Fix authority and add protected actions