The way I achieved, maintain all the permissions associated with a resource by parsing schema. At run time issue parallel request of lookup resource for each permission. Combine the result and return it.