Improved service specific access control by allowing services to define their own access control logic