DSLS authorization rules