My question is what RESOURCE role add up to user authorities which CONNECT doesn't ?