First draft of user authorization checks during state change. A lot of rework needs to be done, this is just A PROOF OF CONCEPT.