Authorization additions, permissions and objects can be tested against the current user.