Every API (a group of methods) can only be accessible via an interface object (accessor). The application requests an API, gets the accessor, make the call(s).

Every API (a group of methods) can only be accessible via an interface object (accessor). The application requests an API, gets the accessor, make the call(s). If permission for that accessor was explicitly granted, the calls succeed. Otherwise, the calls never reach the destination. What would you call this arrangement? A supervisor?