Enabling Run-time Authorization