[beaviskhan]

If you take this approach, you have to reindex when groups/roles changes - not always a feasible choice

[thunky]

You only have to update the metadata, not do a full reindex.

[scott_w]

You'd have to reindex the metadata (roles access), which may be substantial if you have a complex enough schema with enough users/roles.