Boyscout: small refactoring in the ControllerConcern

Moved some code into a single method in order to be able to do the full
authorization *check* in a single, parameterless method.