Webservice-Authorization, ACL and State-Handling