Stripping out model granularity of authorization.  Instead, view or manage are the only two levels across a convention.