if the goal is simply to return all resources that are private vs public, you'd likely keep that state in your DB and query it there