Simple, hierarchical user authorization for web applications, with optional support for plan-based paid services.