Checking authorization to other resources

Todo

Talk about can_access() and is_met()