taxonomy :: authorization and audit capabilities