criteria.fetchPermissions(true);
if (id != null) {
// If we're fetching a single Role, then fetch all the related Sets.
criteria.fetchSubjects(true);
criteria.fetchResourceGroups(true);
criteria.fetchLdapGroups(true);
criteria.fetchBundleGroups(true);
}
// TODO: instead of fetching subjects and resource groups, use a composite object that will pull the subject
// and resource group count across the wire. these counts will not required permission checks at all.