you fetch a page (bigger than the one you'll actually return) from the postgres database and then you call

BulkCheckPermission

on each of those IDs, and repeat as many times as you need to fill out the page that you return to the user