AUTH

authorization is necessary before the permission is available