so i am trying to get all resources a user has permission to view, so not a single permission check