Authorizing using LDAP attributes