The query is helpful in the join cases, so thanks! I didn't know about that. We'll have to test it against some of our other permission situations. For sure the cache is faster than the database checking perms against site nodes (which happens once per page, or once per gif, if the request processor doesn't ignore images).
