Comment 6 for bug 2037107

Additionally the rbac filtering still makes no sense for me.
I checked your query snipped [3] and it proves the problem (https://paste.opendev.org/show/bSPFHtntEymdGOzBAQzU/).

The group by is not working there in the non-admin-query
-> sqlalchemy builds a subquery for the group by (not sure why)
-> left outer join to networkrbacs happens afterwards again due to the orm model
Because of that left outer join we produce again the combinatorial blow-up mentioned in https://bugs.launchpad.net/neutron/+bug/1649317 for (subnet X networkrbacs)

I´m not sure how to get rid of that combinatorial blow-up without changing the the subnet.rbac_entries orm relationship lazy option to anything else than 'joined'.