vary cache of AC based on permission