New feature: DBMS-side page filtering based on IntraACL read permissions