check access only once, before rendering, pass resource.args to checker