> And how would I be able to determine if a resource was public or not? you'd check for

user:*

on

viewer