Massively optimised permissions and URL matching