I can definetly make it more efficient (I don't need all 100 permissions as soon as the user log in)