I guess it's good start for implementing reusable authorization system.