Authorization and Policies

Here are some thoughts on how to make authorization pluggable, and how to express authorization policy.
What is the verb for "watch"? Does every possible action have a verb?