Implementing multiple authorizations by extended capabilities