What a permission check does when it cannot run

• A

  Users will see errors once the service returns

• B

  It puts a great deal of extra load on the permission service as it recovers

• C

  The application should cache permissions instead

• D

  Anybody can do anything for as long as the outage lasts, and nothing looks broken