Not only with script, they have something that can access and assign the assets... but they aren't authorized.