diff --git a/library/Director/Util.php b/library/Director/Util.php
index 2e2e8e2b..2d8a5545 100644
--- a/library/Director/Util.php
+++ b/library/Director/Util.php
@@ -3,12 +3,16 @@
 namespace Icinga\Module\Director;
 
 use Icinga\Authentication\Manager;
+use Icinga\Data\ResourceFactory;
+use Icinga\Module\Director\Web\Form\QuickForm;
 use Zend_Db_Expr;
 
 class Util
 {
     protected static $auth;
 
+    protected static $allowedDbResources;
+
     public static function pgBinEscape($binary)
     {
         return new \Zend_Db_Expr("'\\x" . bin2hex($binary) . "'");
@@ -41,4 +45,66 @@ class Util
     {
         return self::auth()->getRestrictions($name);
     }
+
+    public static function dbResourceIsAllowed($name)
+    {
+        if (self::$allowedDbResources === null) {
+            $restrictions = self::getRestrictions('director/dbresources/use');
+            $list = array();
+            foreach ($restrictions as $restriction) {
+                foreach (preg_split('/\s*,\s*/', $restriction, -1, PREG_SPLIT_NO_EMPTY) as $key) {
+                    $list[$key] = $key;
+                }
+            }
+
+            self::$allowedDbResources = $list;
+        } else {
+            $list = self::$allowedDbResources;
+        }
+
+        if (empty($list) || array_key_exists($name, $list)) {
+            return true;
+        }
+
+        return false;
+    }
+
+    public static function enumDbResources()
+    {
+        $resources = array();
+        foreach (ResourceFactory::getResourceConfigs() as $name => $resource) {
+            if ($resource->type === 'db' && self::dbResourceIsAllowed($name)) {
+                $resources[$name] = $name;
+            }
+        }
+
+        return $resources;
+    }
+
+    public static function addDbResourceFormElement(QuickForm $form, $name)
+    {
+        $list = Util::enumDbResources();
+
+        $form->addElement('select', $name, array(
+            'label'        => 'Resource name',
+            'multiOptions' => $form->optionalEnum($list),
+            'required'     => true,
+        ));
+
+        if (true && empty($list)) {
+            if (self::hasPermission('config/application/resources')) {
+                $hint = $form->translate('Please click %s to create new DB resources');
+                $link = sprintf(
+                    '<a href="' . Url::fromPath('config/resource') . '" data-base-target="_main">%s</a>',
+                    $form->translate('here')
+                );
+                $form->addHtmlHint(sprintf($hint, $link));
+                $msg = $form->translate('No db resource available');
+            } else {
+                $msg = $form->translate('Please ask an administrator to grant you access to DB resources');
+            }
+
+            $form->getElement($name)->addError($msg);
+        }
+    }
 }