One problem you avoid by centralizing is replicating the business logic to determine whether an entity should be able to access an object everywhere you want to access that object.