I have been working on an API where an order can fall under just one category and I want to authorize the request such that the agency logging in to the portal should only b