Use lazy loading on permissions and users.
SQL example documentation.