authorization

* mandatory fields