- Fixed small performance bug: when a user has no permissions, the query
  in user_access() was not cached.