Modeling Authorization in an SOA based Application Scenario