the permission is defined on the token, or the token has a permission on the resource?