...
Deeper into the Resource Can
The service architect needs a place to put the logic to determine whether or not someone belongs to a set of Resources who are authorized to create or update Holds. Although it's all part of the authorization rule, she is attempting to delegate the concept of belonging to a set of Resources to the Resource OSID. A Resource is both singular and plural. In other words, a Resource can represent a single identity or a group of other Resources. This allows an Authorization to reference a single Resource while the Resource OSID understands it to be any one of multiple Resources. Since authorizations are always performed on the Agent, the Resource OSID just needs to answer the question if an Agent is associated with a Resource.
There are two ways to go about managing the Resources.