Designing a Resource Authorization Strategy