def get_authorization(identifer=None, dont_acquire=False):
    """Return an authorization object for the given user or group
        identified by ``identifier``.

        If no ``identifier`` is specified, return authorization object
        for the currently authenticated user.

        If ``dont_acquire`` is set to True, no acquired roles would be
        looked up (only local roles set on the context object).
        """
