Unless my understanding is wrong, this implementation will issue two database requests per `checkPermission` call:
1. `Scope.findOne`
2. `ACL.find` called from `ACL.checkPermission`

From my past experience, ACL checks can create significant performance bottlenecks. However. There will be probably other places where our ACL code issues too many database requests and some of these places may have higher contribution to the overall performance than this particular method. Unless the fix is easy here, I am proposing to create a new story to measure the general performance of our current ACL implementation and invest our effort in places where the we can gain most speedups.