[ACCUMULO-4338] VisibilityConstraint performs Duplicative Authentication Checks

• Type: Improvement
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 1.6.5, 1.7.0, 1.7.1
• Component/s: tserver
• Assignee: Unassigned
• Reporter: Jonathan Wonders
• Created: 09/Jun/16 20:33
• Updated: 09/Jun/16 20:33

Description

The VisibilityEvaluator created by the VisibilityConstraint uses the tablet server's SecurityOperations to determine if the user has authorizations for tokens within the visibility expression. This results in an authentication check per token that is evaluated and can lead to the following performance issues.

• flooding of audit logs since each authentication check produces an audit message
• excessive object creation due to deserialization of user credentials for each authentication check
• mild contention between client pool threads over the ZooCache