Merge "Implement authorize_create and authorize_operation."