Api action authorizations