optimize permissions load - now just one SQL query for any number of single user permissions check