understand that if resource#show returns 403, that means the resource does exist