Default authorization policy. Used when no :authorization_adapter is configured.
:authorization_adapter