I need to give a shout out to Curt Devlin one of my fellow Architect Evangelists on the Industry Evangelism team. He wrote an incredible article on MSDN around Enterprise Authorization Strategy.  The article can be found here: http://msdn2.microsoft.com/en-us/library/bb417064.aspx  It is a must read for anyone who is investigating authorization within their enterprise.