you could find all resources using LookupResources on the "base" permission and then use check to filter the permissions