[Shamun]

You probably can modify it, but not directly. After the BCS files are included (namely the one that resets privileges) you can put in your own code. Then it would be executed like Full Rights -> No Rights -> Full Rights.
Not efficient in terms of SQL, but you probably aren't adding them constantly so its negligible.