Creating and Implementing an Authorization Concept