I've tried acs_object_party_privilege_map before without much success, but I may try the 4.6.1 version if I run into trouble again. From what I've seen the permission system is very usefull but I you need to return a rowset based on the value of permission_p you need to rethink your design.