> Thanks for reminding me that I should set _all_dbs to hide dbs the > curertn user can't read if that doesn't incur much additional > overhead.
I think that it will incur a huge overhead, if there are a large number of databases and the reader rights are stored within the databases themselves. It'll have to open and read every single database file on disk, even if the user only has access to one. Storing the rights within the user record avoids this problem completely.