check auth on list resources