giving access to "user" for many different types of resources