some auth, some manipulation