allow non-admin web users access to LocationResource