also: user should technically never see the resource