1. A method of authorizing access in system and application services, the method comprising: receiving a request for access to a service from another service or an application via an interface accessible by the other service or the application; and determining whether to authorize the request based at least in part on a specified policy.