Change Using Injection

It happens to be in these examples the whole controller has the same action permission.  But if this was lets say the synonym controller, there are different actions for add, and view.  So in the isAuthorized request we would send in 'synonymAdd' in the add method and 'synonymView' in the view method.  Passing in the action in the constructor of the request authorization service would add state to the class that makes it not able to be managed as a single instance for the app by our DI framework.