authorization and control