otherwise, you can use a LookupResources to find all the resources to which the user has permission