added back permission check on resourcia