this is a slightly different approach. maybe we should keep it. this one would be useful when the authorization is not context based and we can't provide the proper context tags on answers, but have security voters in place that can decide on a single user what he is allowed to do.

or am i misunderstanding things?