@ErisDS @kirrg001 a newer article on authorization mentioning some interesting approaches, sample code is provided: http://martinfowler.com/articles/web-security-basics.html#AuthorizeActions