Now we have a common is_authorized method for all types of actions