authorization and audit Security