access control check for resource attributes in generic commands