An Adequate Architecture to Enforce Dynamic Authorization