getChildren() from the resourceNode repository consider ROLE_WS_MANAGER_XXX as ROLE_ADMIN.