Authorization concept, with history, logic operators, grants/revokes