can now fetch user, container, and resourse. can also write a container and resource. can set simple ACL