Exercise for Custom Authorization Models

Within the oak-exercise module we should have some code illustrating how a custom authorization model can be written and deployed. This should go along with some exercise to extend/complete/practice with the sample code. The proposed example could e.g. illustrate

• a simplified role-based authorization model or
• a variant of the oak-authorization-cug that denies access for principals from a specific country.

Ideally we were able to extract the steps required to write the example to update oak-doc with some additional instructions on how to build custom authorization.