Authorising process & decision making