If we have to check permissions on every resource and only one out of every hundred has access (and that's somewhat high)