In some implementations, data specifying (i) identification information, (ii) a beacon identifier associated with a wireless proximity beacon, and (iii) a proximity of a client device to the wireless proximity beacon is received. A path of movement is determined based on the received data. Data specifying a pattern of movement that is associated with an action is accessed. The path of movement of the client device is determined to satisfy a particular pattern of movement associated with a particular action. An application instance operating on the client device is authorized to perform the particular action based at least on determining that the path of movement of the client device satisfies the particular pattern of movement associated with the particular action. Data enabling the application instance operating on the client device to perform the particular action is transmitted.