[JCR-2573] Performance of AC Evaluation

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0
• Fix Version/s: 2.2
• Component/s: jackrabbit-core
• Assignee: Angela Schreiber
• Reporter: Angela Schreiber
• Created: 17/Mar/10 08:02
• Updated: 08/Nov/11 15:52
• Resolved: 08/Dec/10 19:20

Description

1. Performance in access control evaluation
=====================================================================

• main focus on
  > read performance
  > resource-based access control in .a.j.c/s/authorization/acl/*

• comparison admin vs. anonymous with full permissions
• comparision between shortcut and ACL-evaluation.
• comparison JR 1.4 vs JR 2.0 [actually i will compare Day's CRX as it already provided
  some custom AC stuff with JR 1.4]

2. Potential Problems
=====================================================================

I would expect the most significant problems to be found in

a) ACLProvider#retrieveResultEntries: calculating effective ACEs
for each session separately.

b) AclPermission:
Each instance registering an event listener in order to
keep the result cache up to date

c) AclPermission:
Resolution form Path to Item or to nearest existing Item

Sub-Tasks

• Cache of o.a.j.c.security.authorization.AbstractCompiledPermissions should be configurable: Closed