Authorization on service layer and GUI layer.