@User longer term, we're also working on https://github.com/authzed/spicedb/issues/207 which should provide a lightning fast way of retrieving the full list of object IDs accessible for a particular subject and permission via a cache. If/when it is done, it'll likely be tied into LookupResources too, which would just use the cache if available.