The Set and Function Approach to Modeling Authorization in Distributed Systems