@authorisation: Is there a guide