[OAK-9185] AbstractAccessControlManager: improve refresh strategy of PermissionProvider

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.36.0
• Component/s: core, jcr, security
• Labels: performance
• Assignee: Angela Schreiber
• Reporter: Angela Schreiber
• Created: 25/Aug/20 09:40
• Updated: 17/Nov/20 10:17
• Resolved: 08/Sep/20 12:52

Description

since AbstractAccessControlManager does not have access to the RefreshStrategy present in oak-jcr, it currently eagerly refresh the PermissionProvider used internally. asanso reported that this may lead to performance issues, when item read operations are combined with frequent calls to AccessControlManager.hasPrivileges or AccessControlManager.getPrivileges.

Issue Links

• is related to: OAK-8673 Determine and possibly adjust size of eagerCacheSize
• relates to: OAK-9203 PermissionProvider.refresh: create dedicated benchmarks and evaluate potential improvements