That makes me think of another possible workaround in the meanwhile:
if not app_tables.RBAC_table.get(q.all_of(role=actual_user_role, q.all_of(attributes=actual_user_attributes,actual_user_attributes=attributes)):
If A is a subset of B and B a subset of A then A==B, does it make sense?
Don’t know how slow that can be…