fix permissions when you are not the owner of a /resource-based link

[N-give]

This requires searching back to resources that you do have permissions to, respecting read vs write vs owner