1-way authorization