> >>So why is this necessary? Is it for ACL checks on User Defined groups? > > > >It's for ~all group ACL and groupmember checks. > > > > doesn't sound encouraging... Trying to do complex ACL searches based on transitive closures quickly in SQL is...hart.