Added permission checks for <Resource> into ResourceController and into main view plxmain.ejs