Resource permission & (un)authorise user