you write a relationship from the resource to the user over a

creator

relation and then check for the current user