Simple object authorization framework.