Authorization handler for ResourceController