I tried putting the permissions on both the user and a role I create on the database individually. The user login behaved the same way in both attempts. ...

Well, It looks like it is doing a full count of all permissions on login. If they only have select, it's better. If I through them in datareader...