Add resource based mechanism to grant default permissions am: 59020bffb7 am: 34d85c6087
am: e3697a3569

Change-Id: Idf2e194e617d44b8dc5cced9162e98e8d48977c4