We don't enforce authorization at the model level, but we do encapsulate the logic of doing an authorization check in Authorization, which I could see this being placed there with one of the names you mentioned above.