diff --git a/src/Aggreact/Authorization/Handler.hs b/src/Aggreact/Authorization/Handler.hs
new file mode 100644
index 0000000..0949494
--- /dev/null
+++ b/src/Aggreact/Authorization/Handler.hs
@@ -0,0 +1,15 @@
+module Aggreact.Authorization
+  ( AuthorizationHandler (..)
+  )
+where
+
+import           Protolude
+import Aggreact.Scopes
+
+
+data AuthorizationHandler =
+  AuthorizationHandler
+  { filterAccess :: Scope -> Maybe User -> Handler ()
+  , hasScope     :: Scope -> Maybe User -> Bool
+  , userScopes   :: Maybe User -> Scopes
+  }