ACCESS-3: Define AuthorizationProvider interface