different resource types have different (large) sets of permissions