Authorization vs. Business Logic
...logic. When you start thinking about this, you often end up in a big gray area: where does the "authorization" end and the "business logic" in your method begin? If there were some obvious distinction between the two, you could easily factor out the authorization logic and perhaps even centralize it
If the authorization logic is simple,...
