a good D7 query for determining if a user has a specific permission
via agentrickard
what's wrong with user_access('permission', $account) ?
it requires a user_load_multiple() (a user_load to get the roles on the account, turning in the ID is not enough)
which is wasteful if you can do it at the query level
you could see what queries that function runs
it seems like that is a somewhat complicated thing to work out
since users can belong to many roles
how many users is this for at a time? I'd just use user_load() + user_access().