but yeah, to @theconductor's point, enumerating all permissions on all resources is going to be expensive in any system