fix-infinite.diff

diff --git a/src/Security/InheritedPermissions.php b/src/Security/InheritedPermissions.php
index ae8d203..66a1987 100644
--- a/src/Security/InheritedPermissions.php
+++ b/src/Security/InheritedPermissions.php
@@ -212,6 +212,10 @@ class InheritedPermissions
             foreach ([ Versioned::DRAFT, Versioned::LIVE ] as $stage) {
                 $stageRecords = Versioned::get_by_stage($this->getBaseClass(), $stage)
                     ->byIDs($ids);
+                // Exclude previously calculated records from later stage calculations
+                if ($combinedStageResult) {
+                    $stageRecords = $stageRecords->exclude('ID', array_keys($combinedStageResult));
+                }
                 $stageResult = $this->batchPermissionCheckForStage(
                     $type,
                     $globalPermission,

3.x has a slightly different code style. You'll need to use direct SQL queries.

if($ids) {
	$idQuery = "SELECT \"ID\" FROM \"$table\" WHERE \"ID\" IN ($idPlaceholders)";
	$idArgs = $ids;
	if ($combinedStageResult) {
		$combinedPlaceholders = DB::placeholders($combinedStageResult);
		$idQuery .= " AND \"ID\" NOT IN ($combinedPlaceholders)";
		$idArgs = array_values($ids) + array_keys($combinedStageResult);
	}
	$stageIds = DB::prepared_query($idQuery, $idArgs)->column();
}

See silverstripe/silverstripe-framework#5876

4.x tests that need rewriting https://github.com/open-sausages/silverstripe-framework/blob/ca1e6f435ad4ec42df0487265098a3d47c9ccf63/tests/php/Security/InheritedPermissionsTest.php#L233-L267