Comment by gertd

So the idea is that you create a candidate set of resource keys from the permission system and join that with the external database and / or use it as a post filter?