1. A system for providing an authorization framework for an application, comprising: one or more declarations for specifying authorization enforcement points for one or more target classes in an application; one or more declarations for specifying one or more permission classes for the one or more authorization enforcement points; and a processor programmed to insert authorization enforcement code into one or more of the target classes according to the authorization enforcement points.