So maybe a virtual field on the ressource APIs, like "canBeEdited" that would be dynamic based on the current User doing the call