Just made it "authorised user" for now, to keep the security review happy
Also changed case entity paths