internal authorization book