add via to resource permissions