Add resource based mechanism to grant default permissions
am: d44d46aa50

Change-Id: If97c1e008dccf35e0c3e8623b2a461db6e46023c