well, a user who has edit access can of course read the resource as well, so we were thinking about getting all visible resources first and then all writable to get the final list (and potentially admin and owner in the future)