has_access and has_all_access now allows passing custom resources list