Wow! Don: it looks like I really need to revisit my thinking on data model design. If real permissions can now be queried so efficiently, things I thought were just impossible in the real world may now be the only reasonable way to do things.