optimization
update permission handling

known issue: cache does not rebuild on edits