Consider if authorization model can be simplified

[jakob1379]

OpenFGA and (py)Casbin seems to be popular solution when in need for modeling authorization policies and enforcement. Smthe current setup has limited roles and simple policies, if we need more flexible rule enforcement consider if either of these solutions (or a third option) is more appropriate.