Regarding issue #1. If the identity has the role, does not make sense to check inheritance. Or am I missing something here ?

Regarding issue #2. That may happen depending on how deep is your inheritance tree. Can you provide more details for this case ? How many users, roles, groups, roles grant to groups, etc ?