Method-level resource permissions