For another datapoint, I have a test db with 300k acs_objects,
42k users, 8 groups, 7 rel_segments, 125 acs_privileges, and 84k rows for acs_permissions and party_member_map.
This is the typical openacs install with all packages installed with registered users + a few sitewide admins but no real permissioning beyond the default. On that site (once
the disk cache is populated) the time to check for a direct
permissions check is 24ms and for indirect permissions it
is 8.5ms (this is on an amd XP 1800+ with 1gb memory).
Curiously, this reproduces the result on oracle where the
direct permission check is a fair bit slower than the indirect
permission check (something not in Don's postgres results).