Solution 1:
Not really. What you call system is actually an instance of a certain class dealing with the authorization. If there were only one class to handle it all you probably would not need any (UML) design at all. The X would probably be an instance of Authorization
.