Added AuthorizationResult

This is related to #180

I know that this PR creates some overhead, because the AuthorizationService actually implements already `getIdentity` but it the permission's name as well as the identities roles are really really really important for many Assertions and since I do not want to BC, I left it there.

This is explicitly written in that matter, that we do not need to tag 3.0