jackrabbit-oak-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Tobias Bocanegra (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (OAK-1138) Implement global per principal permission entry cache
Date Fri, 01 Nov 2013 01:15:18 GMT

    [ https://issues.apache.org/jira/browse/OAK-1138?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13810932#comment-13810932
] 

Tobias Bocanegra commented on OAK-1138:
---------------------------------------

all the tests and profiling I did so far show, that reading the permission entries from the
repository (memory datastore) is the bottleneck so far. adding this cache improves read performance
by 25%. but is still 20% slower than jackrabbit and 3x slower than reading with an admin session
(IIRC). the current solution caches very aggressively and has not limit or constraint yet.


I also believe that there must be other expensive overhead which is not obvious. my gut feeing
is that oak suffers from too deep call stacks and too many object creations. but I haven't
measured this yet. 



> Implement global per principal permission entry cache
> -----------------------------------------------------
>
>                 Key: OAK-1138
>                 URL: https://issues.apache.org/jira/browse/OAK-1138
>             Project: Jackrabbit Oak
>          Issue Type: Sub-task
>          Components: security
>    Affects Versions: 0.10
>            Reporter: Tobias Bocanegra
>            Assignee: Tobias Bocanegra
>            Priority: Minor
>
> In order to speedup ACL evaluation, we need some sort of cache that can hold the pre-computed
access control permission entries.



--
This message was sent by Atlassian JIRA
(v6.1#6144)

Mime
View raw message