Recommended pattern for managing resource permissions - Windmill