Added resources in permissions isAllowed()