[
https://jira.nuxeo.org/browse/NXP-5746?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=82268#action_82268
]
Olivier Grisel commented on NXP-5746:
-------------------------------------
We need to fetch the parentGroups reference to resolve the list of all groups
the user belongs to for the ACL system to work properly. Right now the
directory API does not allow to resolve the parentGroups reference without
resolving the members reference.
The easiest solution to work around the performance impact of this reference
resolutions would be to enable the cache for the groupDirectory in the default
SQLDirectory configuration IMHO.
> Groups should never be fetched during login
> -------------------------------------------
>
> Key: NXP-5746
> URL: https://jira.nuxeo.org/browse/NXP-5746
> Project: Nuxeo Enterprise Platform
> Issue Type: Bug
> Components: Security / Rights
> Affects Versions: 5.3.2
> Reporter: Thierry Delprat
> Assignee: Olivier Grisel
> Fix For: 5.4
>
> Attachments: NXP-5746-quick-patch.diff
>
>
> During resolution of the principal the Group objects are fetched in a non
> lazy way
> => we fetch all content of the group (all user ids) whereas only the parentID
> is useful
> Call from :
> NuxeoPrincipalImpl : 373 nxGroup = userManager.getGroup(groupName);
> => TableReference.getIdsFor : 235
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.nuxeo.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
_______________________________________________
ECM-tickets mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm-tickets
