(experimental) DBMS-side functions for checking permissions
New feature: DBMS-side page filtering based on IntraACL read permissions