Add resource based mechanism to grant default permissions
am: 59020bffb7

Change-Id: I34d675b7f2ef4fb439bb582c6b36cb00de16acd8