Add authorization to catalog operations