authorization manager

authorization manager