Add authorization behavior to models