the former can be done with LookupResources, although only for a specific permission at a time