check that resources do not have access to the top environment