if the number of documents that a user has access to is much larger than the number of documents in a page that comes back from your endpoint, you'd postfilter using

CheckBulkPermissions

rather than prefiltering with

LookupResources