1. An apparatus comprising: a memory operable to store a plurality of tokens indicating that a user is attempting to access a resource; and a processor operable to: determine an authorization level for the user based at least in part upon the plurality of tokens, the authorization level indicating whether the user is authorized to access the resource; determine a related resource that shares a relationship with the resource; determine that the authorization level indicates that the user is authorized to access the related resource; and communicate a decision token indicating that the user is authorized to access the resource and the related resource.