public class Authorization
Authorization asks: what is the user allowed to do? This class holds user rights.
An object instance of this class is handed to each serivce call to enable that
service to work according to granted service level.
One part of authorization decisions is the history of the past user action.
Therefore an authorization object has the attachment of an Accounting object;