diff --git a/devdocs/specs/core-list-graph-datatable-filtering-sorting-paging.txt b/devdocs/specs/core-list-graph-datatable-filtering-sorting-paging.txt
index b2f51115..ebcef965 100644
--- a/devdocs/specs/core-list-graph-datatable-filtering-sorting-paging.txt
+++ b/devdocs/specs/core-list-graph-datatable-filtering-sorting-paging.txt
@@ -37,6 +37,13 @@ Has an "any" boolean property which if true means make an OR query of the condit
 filter:{any:true/false,items:[
 	{op:"OPERATOR",value:One of an array of strings, single string or single value of any supported type, i.e. int, decimal, bool iso8601 date etc }
 	]}
+
+AUTHORIZATION:
+    Authorization is controlled via roles set on underlying DataList object itself
+    We provide a DataList suitable for picklists with ANY role access and anything with sensitive info has it's DataList Required roles to higher level 
+    This way can still supply for picklists but hide sensitive infor for tables etc
+    Rights to DataListView follow rights to underlying object and also rights to make a datalistview itself
+    
 Filter operators: