add Resource#permitted?