if the question is "what are all resources for which a user has any permission," you can express that by defining a

permission has_any_permission = the + sum + of + all + of + the + other + permissions