set_access_rules should check for valid resource id or resource instance

[lstillwe]

Should probably throw a NotFound if the provided resource or resource id does not exist.