Authorization - service layer + presentation - need some testing and cleaning, but otherwise done