It just seems that storing permissions doesnt scale and quickly. If you have even just 3 or 4 crud endpoints, you end up with read:this, write:this, read:that, write:that, etc etc.

Makes me think the DB call needs to be made (and yea, can be cached).