diff --git a/data-access/servlet/src/main/java/cutout/webapi/ServletCutout.java b/data-access/servlet/src/main/java/cutout/webapi/ServletCutout.java
index 81ab9cf4844ad42848bebeba554cf55524cab0ec..34585c62d627ef55b5bca053fcd4f0fbe9e648dd 100644
--- a/data-access/servlet/src/main/java/cutout/webapi/ServletCutout.java
+++ b/data-access/servlet/src/main/java/cutout/webapi/ServletCutout.java
@@ -52,7 +52,7 @@ public class ServletCutout extends HttpServlet
    protected static final Settings    settings   = Settings.getInstance();
    protected static final Subsurvey[] subsurveys = Subsurvey.loadSubsurveys(settings.fitsPaths.surveysMetadataAbsPathname());
 
-   protected boolean resolveFromId    = settings.dbConn.isDbUriEmpty(); 
+   protected boolean resolveFromId    = true;//FIXME separate setting authz is separate table settings.dbConn.isDbUriEmpty(); 
    protected boolean useEngineOverCli = settings.amqpConn.isHostnameEmpty();
 
    final String RESPONSE_ENCODING      = "utf-8";
diff --git a/docker/Dockerfile.soda b/docker/Dockerfile.soda
index 5dc88fa25e30e57cabc9e3cb838782fda91acd3a..f83f34b38ad86bae054a897fa4c72a16b67c543e 100644
--- a/docker/Dockerfile.soda
+++ b/docker/Dockerfile.soda
@@ -54,7 +54,7 @@ COPY deps/context.xml ${WEBAPP_DIR}/META-INF/context.xml
 
 # DB used for authorization
 # Tomcat must load DB-driver (postgresql_*.jar), vlkb-soda does not explicitely load DB-drivers
-COPY deps/postgresql-*.jar  /var/lib/tomcat9/lib
+COPY deps/postgresql-*.jar  ${CATALINA_BASE}/lib
 
 
 # modif permissions to allow run as non-root: need to config TSL and ROOT-CONTEXT
diff --git a/docker/deps/soda.logging.properties b/docker/deps/soda.logging.properties
index d7d04e16c9cb22ea9ef3d5c7af79d4eca3fa27c5..1301c18978b02fef05855c96aeb85974a3557b4c 100644
--- a/docker/deps/soda.logging.properties
+++ b/docker/deps/soda.logging.properties
@@ -68,4 +68,4 @@ ServletCutout.level = CONFIG
 ResolverFromId.level = INFO
 SodaImpl.level = INFO
 VlkbCli.level = INFO
-
+AuthPolicyDb.level = INFO
diff --git a/docker/start-soda.sh.soda b/docker/start-soda.sh.soda
index b07d140feea7a0b3ad385f5e810347393d0ebc96..8b6e6f6e8710a35b0e791d9a7e7b30ad4e6deb6f 100755
--- a/docker/start-soda.sh.soda
+++ b/docker/start-soda.sh.soda
@@ -114,7 +114,7 @@ else
       echo "db_schema=$AUTHZ_DB_SCHEMA"
       echo "db_user_name=$AUTHZ_DB_USERNAME"
       echo "db_password=$AUTHZ_DB_PASSWORD"
-   } > $WEBAPP_DIR/WEB-INF/classes/authpolicy.properties
+   } >> $WEBAPP_DIR/WEB-INF/classes/cutout.properties
    # cp $WEBAPP_DIR/WEB-INF/web-cutout-ia2token.xml $WEBAPP_DIR/WEB-INF/web.xml
 fi
 
@@ -127,6 +127,7 @@ sed -i "s/.*ServletCutout\.level.*=.*/ServletCutout.level = $DBG_LEVEL/g" $CATAL
 sed -i "s/.*ResolverFromId\.level.*=.*/ResolverFromId.level = $DBG_LEVEL/g" $CATALINA_BASE/conf/soda.logging.properties
 sed -i "s/.*SodaImpl\.level.*=.*/SodaImpl.level = $DBG_LEVEL/g" $CATALINA_BASE/conf/soda.logging.properties
 sed -i "s/.*VlkbCli\.level.*=.*/VlkbCli.level = $DBG_LEVEL/g" $CATALINA_BASE/conf/soda.logging.properties
+sed -i "s/.*AuthPolicyDb\.level.*=.*/AuthPolicyDb.level = $DBG_LEVEL/g" $CATALINA_BASE/conf/soda.logging.properties
 
 
 date