Function check_write 

pub fn check_write(
    store: &impl Storelike,
    resource: &Resource,
    for_agent: &ForAgent,
) -> AtomicResult<String>

Throws if not allowed. Returns string with explanation if allowed.