cache user groups

[Antonio Beamud Montero]

It's ok cache the user groups? like

@cache.region('short_term', 'groupfinder')
def groupfinder(...):

Or it's better approach use the session, to check the user info is in
the user session, before invoke the sqlalchemy machinery?

Greetings.

[Jason]

The only problem that I see with this is if you want to remove a user from a group it's not going to propagate to your application immediately unless you remember to clear that cache at the same time. This could be a security issue if you remove a user's credentials and they are still able to access a now forbidden area for a short time.

-- Jason