in Arches search results component, the permission_backend.get_search_ui_permissions() is called to update the permissions of each result in a set of search results. Each time this method gets called in either Arches default allow or default deny, a new django orm query gets issued to lookup node/nodegroup permissions. It's a pretty significant performance lag on larger result sets.