Attribute and authorization problem