are all resources visible to all users in your business domain, and what you want to make sure is the frontend renders the the corresponding controls/UI components in case the user has specific permissions?