Tree reorder is permitted only for authorized resources