fixed reverse order of auth item hierarchy