Authorization checker moved to business tier