Fix duplicate member-url-resources entry in permissions