Basic hierarchy checking when accessing HTTP resources (i.e. user
exists, and resource exists...)