simplify SQL for authorisation