+ **listing resources**
    + don't you just want authz checks here as well?

Are you saying?
- you don't think you do load roles when viewing a folder listing in the resources tool.
- that you're surprised by the design of the tool, in that it doesn't have a better set of objects that separate these things.