[JCR-3395] separate entries used for permission eval from ACEs exposed in JCR

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.5.2
• Component/s: jackrabbit-core, security
• Assignee: Angela Schreiber
• Reporter: Julian Reschke
• Created: 19/Jul/12 13:15
• Updated: 23/Jan/13 08:29
• Resolved: 07/Aug/12 12:25

Description

See: https://issues.apache.org/jira/secure/attachment/12533955/JCR-2950_entryseparation.patch

yet another patch that will allow us to try further improvements later on: the patch adds complete separation of entries used for permission eval from ACEs exposed on the JCR API level. consequently i had to rewrite the retrieval of effective policies (that were using the entry collector as well). in addition i had to remove the EntryCollectorTest#testIsCached as they were relying on the effective policies actually exposing the entries in the cache. this is no longer the case for the reason above.

this patch most probably doesn't add a major performance gain itself, but it really reduces the entries stored in the cache to the information required for permission-eval omitting all additional stuff that is used for JCR API compliance. in addition it would allow us try if it was beneficial to use multiple sessions to collect the entries.