use `set`s to make `get_user_permissions` more efficient
Authored by: mgood 2007-03-10
Parent: [r4958]
Child: [r4960]