changed authorization implementation on domain model methods to use PostSharp aaspects in order to determine how the methods should be secured, and then running the standard domain model rules in order to determine auth.