Permission check code might be a bit heavy so I was thinking about caching the permission object returned on a TTL cache with 1m expiry. Then I thought that keycloak is already using infinispan. Can anyone give some directions on how easy is to add a new cache to the infinibase used by Keycloak and what are the practices used in keycloak to get/update those caches?