True. Then a command is the easier way of implementing it, since those have the authorisation stuff already taken care of.