Cached user rights lookups