materialize is basically denormalizing permission checks